{"id":"CVE-2018-4183","aliases":["EUVD-2018-15969","GHSA-8f46-rc2r-w7j6","SUSE-SU-2018:2162-1","SUSE-SU-2018:2172-1","SUSE-SU-2018:2233-1"],"status":"published","title":"In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox...","description":"In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.","severity":{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00378,"percentile":0.31982,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-08-01T12:02:19Z","modified":"2026-06-17T01:58:30Z","affected":[{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.7.5-20.14.1"}]}],"bundled":5},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Development Tools 15","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.2.7-3.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 11 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-8.46.56.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 11 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-8.46.56.3.1"}]}],"bundled":4},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 11 SP4","package":"cups","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.3.9-8.46.56.3.1"}]}],"bundled":4}],"products":[{"vendor":"apple","product":"mac_os_x"}],"references":[{"url":"https://www.debian.org/security/2018/dsa-4243","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Not Applicable","Third Party Advisory"]},{"url":"https://support.apple.com/HT208849","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://security.gentoo.org/glsa/201908-08","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4183"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1607284","tags":["Third Party Advisory"]},{"url":"https://github.com/advisories/GHSA-8f46-rc2r-w7j6"},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182162-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1050082","tags":["report"]},{"url":"https://bugzilla.suse.com/1061066","tags":["report"]},{"url":"https://bugzilla.suse.com/1087018","tags":["report"]},{"url":"https://bugzilla.suse.com/1096405","tags":["report"]},{"url":"https://bugzilla.suse.com/1096406","tags":["report"]},{"url":"https://bugzilla.suse.com/1096407","tags":["report"]},{"url":"https://bugzilla.suse.com/1096408","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2017-18248","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4180","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4181","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4182","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4183","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182172-1/","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2018/suse-su-20182233-1/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-4183","description":"In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.","status":"published","published":"2019-01-11T18:00:00Z","modified":"2024-08-05T05:04:29.854Z","updated_at":"2026-11-02T14:35:08.024147Z"}],"euvd":[{"id":"EUVD-2018-15969","description":"In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.","status":"published","published":"2019-01-11T18:00:00Z","modified":"2024-08-05T05:04:29Z","updated_at":"2026-11-03T02:40:14.130834Z"}],"ghsa":[{"id":"GHSA-8f46-rc2r-w7j6","title":"In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox...","description":"In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.","status":"published","published":"2022-05-13T01:52:38Z","modified":"2023-02-02T05:02:18Z","cvss":[{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T14:51:24.429027Z"}],"nvd":[{"id":"CVE-2018-4183","description":"In macOS High Sierra before 10.13.5, an access issue was addressed with additional sandbox restrictions.","status":"published","published":"2019-01-11T18:29:01.157Z","modified":"2026-06-17T01:58:30.823Z","cvss":[{"version":"3.0","score":8.2,"vector":"CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":7.2,"vector":"AV:L/AC:L/Au:N/C:C/I:C/A:C","level":"high","assessor":"primary"}],"updated_at":"2026-11-02T14:04:53.079938Z"}],"osv":[{"id":"SUSE-SU-2018:2162-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\nThe following security vulnerabilities were fixed:\n\n- CVE-2017-18248: Handle invalid characters properly in printing jobs. This fixes a problem that\n  was causing the DBUS library to abort the calling process. (bsc#1061066 bsc#1087018)\n- Fixed a local privilege escalation to root and sandbox bypasses in the\n  scheduler\n- CVE-2018-4180: Fixed a local privilege escalation to root in dnssd backend\n  (bsc#1096405)\n- CVE-2018-4181: Limited local file reads as root via cupsd.conf include\n  directive (bsc#1096406)\n- CVE-2018-4182: Fixed a sandbox bypass due to insecure error handling\n  (bsc#1096407)\n- CVE-2018-4183: Fixed a sandbox bypass due to profile misconfiguration\n  (bsc#1096408)\n\nThe following other issue was fixed:\n\n- Fixed authorization check for clients (like samba) connected through the\n  local socket when Kerberos authentication is enabled (bsc#1050082)\n","status":"published","published":"2018-08-01T12:02:19Z","modified":"2026-02-04T03:38:43.870969Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2172-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\nThe following security vulnerabilities were fixed:\n\n- Fixed a local privilege escalation to root and sandbox bypasses in the\n  scheduler\n- CVE-2018-4180: Fixed a local privilege escalation to root in dnssd backend\n  (bsc#1096405)\n- CVE-2018-4181: Limited local file reads as root via cupsd.conf include\n  directive (bsc#1096406)\n- CVE-2018-4182: Fixed a sandbox bypass due to insecure error handling\n  (bsc#1096407)\n- CVE-2018-4183: Fixed a sandbox bypass due to profile misconfiguration\n  (bsc#1096408)\n","status":"published","published":"2018-08-02T12:20:13Z","modified":"2025-05-02T04:08:19.596017Z","updated_at":"2026-11-02T15:53:44.972817Z"},{"id":"SUSE-SU-2018:2233-1","title":"Security update for cups","description":"This update for cups fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-4180: Fix local privilege escalation to root in dnssd backend (bsc#1096405).\n- CVE-2018-4181: Limited local file reads as root via cupsd.conf include directive (bsc#1096406).\n- CVE-2018-4182: Fix cups-exec sandbox bypass due to insecure error handling (bsc#1096407).\n- CVE-2018-4183: Fix cups-exec sandbox bypass due to profile misconfiguration (bsc#1096408).\n","status":"published","published":"2018-08-07T10:47:47Z","modified":"2026-02-04T04:36:53.667836Z","updated_at":"2026-11-02T15:53:44.972817Z"}]}}