{"id":"CVE-2018-4213","aliases":["DEBIAN-CVE-2018-4213","EUVD-2018-15999","GHSA-p6hh-6rh4-v28w","SUSE-SU-2019:0059-1","SUSE-SU-2019:0092-1","UBUNTU-CVE-2018-4213","USN-3781-1","openSUSE-SU-2019:0081-1"],"status":"published","title":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","severity":{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.02017,"percentile":0.81064,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20"],"published":"2018-09-28T00:00:00Z","modified":"2026-10-23T18:04:47Z","fixes":[{"ecosystem":"Debian:12","package":"webkit2gtk","fixed_in":["2.22.0-2"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"webkit2gtk","fixed_in":["2.22.0-2"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"webkit2gtk","fixed_in":["2.22.0-2"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","fixed_in":["2.22.2-0ubuntu0.18.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:12","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.0-2"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.0-2"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.0-2"}]}]},{"source":"osv","ecosystem":"SUSE:OpenStack Cloud 7","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Desktop 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP2","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Software Development Kit 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-LTSS","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP2-BCL","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP3","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 12 SP4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 4","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.4-2.29.3"}]}],"bundled":45},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Basesystem 15","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.5-3.13.1"}]}],"bundled":43},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Desktop Applications 15","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.5-3.13.1"}]}],"bundled":43},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.4.2+dfsg-1ubuntu2.1","5.5.1+dfsg-2ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.8.5+dfsg1-3","2.10.3+dfsg1-1","2.10.4+dfsg1-1","2.10.5-1","2.10.6-1","2.10.6-1ubuntu1","2.10.8-1ubuntu1","2.10.9-1ubuntu1","2.12.5-0ubuntu0.16.04.1","2.14.2-0ubuntu0.16.04.1","2.14.3-0ubuntu0.16.04.1","2.14.5-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.1","2.16.1-0ubuntu0.16.04.2","2.16.2-0ubuntu0.16.04.1","2.16.3-0ubuntu0.16.04.1","2.16.6-0ubuntu0.16.04.1","2.18.0-0ubuntu0.16.04.2","2.18.3-0ubuntu0.16.04.1","2.18.4-0ubuntu0.16.04.1","2.18.5-0ubuntu0.16.04.1","2.18.6-0ubuntu0.16.04.1","2.20.1-0ubuntu0.16.04.1","2.20.2-0ubuntu0.16.04.1","2.20.3-0ubuntu0.16.04.1","2.20.5-0ubuntu0.16.04.1"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu10","2.3.2-0ubuntu11"]},{"source":"osv","ecosystem":"Ubuntu:16.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.9-2ubuntu2","2.4.10-0ubuntu1","2.4.11-0ubuntu0.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.2-0ubuntu0.18.04.1"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.9.1+dfsg-5ubuntu1","5.9.1+dfsg-5ubuntu3","5.212.0~alpha2-5build2","5.212.0~alpha2-5build4","5.212.0~alpha2-7","5.212.0~alpha2-7build2","5.212.0~alpha2-7ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"qtwebkit-source","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.3.2-0ubuntu13"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkitgtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["2.4.11-3","2.4.11-3ubuntu2","2.4.11-3ubuntu3"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha3-3","5.212.0~alpha3-5","5.212.0~alpha3-6","5.212.0~alpha3-7","5.212.0~alpha4-1","5.212.0~alpha4-1ubuntu1","5.212.0~alpha4-1ubuntu2","5.212.0~alpha4-1ubuntu2.1"]},{"source":"osv","ecosystem":"Ubuntu:22.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-12","5.212.0~alpha4-13","5.212.0~alpha4-14","5.212.0~alpha4-14build1","5.212.0~alpha4-14ubuntu2","5.212.0~alpha4-15ubuntu1"]},{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"qtwebkit-opensource-src","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["5.212.0~alpha4-33","5.212.0~alpha4-33build1","5.212.0~alpha4-34","5.212.0~alpha4-34ubuntu3","5.212.0~alpha4-34ubuntu4","5.212.0~alpha4-36"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"webkit2gtk","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.2-0ubuntu0.18.04.1"}]}],"versions":["2.18.0-2","2.18.0-2build1","2.18.2-1","2.18.3-1","2.18.4-1","2.18.6-1","2.19.91-1ubuntu1","2.19.92-1","2.20.0-1","2.20.0-2","2.20.0-2ubuntu1","2.20.1-1","2.20.2-0ubuntu0.18.04.1","2.20.3-0ubuntu0.18.04.1","2.20.5-0ubuntu0.18.04.1"],"bundled":24},{"source":"osv","ecosystem":"openSUSE:Leap 15.0","package":"webkit2gtk3","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"2.22.5-lp150.2.9.1"}]}],"bundled":43}],"products":[{"vendor":"apple","product":"icloud"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"itunes"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"tvos"},{"vendor":"apple","product":"watchos"},{"vendor":"canonical","product":"ubuntu_linux"},{"vendor":"webkitgtk","product":"webkitgtk\\+"}],"references":[{"url":"https://support.apple.com/HT208695%2C","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://support.apple.com/HT208697%2C","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://support.apple.com/HT208693%2Chttps://support.apple.com/HT208698%2C","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://support.apple.com/HT208696%2C","tags":["x_refsource_MISC","x_transferred","web"]},{"url":"https://usn.ubuntu.com/3781-1/","tags":["vendor-advisory","x_refsource_UBUNTU","x_transferred","Third Party Advisory","advisory"]},{"url":"https://security.gentoo.org/glsa/201812-04","tags":["vendor-advisory","x_refsource_GENTOO","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/HT208694","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4213"},{"url":"https://support.apple.com/HT208693,https://support.apple.com/HT208698,"},{"url":"https://support.apple.com/HT208695,"},{"url":"https://support.apple.com/HT208696,"},{"url":"https://support.apple.com/HT208697,"},{"url":"https://github.com/advisories/GHSA-p6hh-6rh4-v28w"},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-4213","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190059-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1110279","tags":["report"]},{"url":"https://bugzilla.suse.com/1116998","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4191","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4197","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4207","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4208","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4209","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4210","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4212","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4213","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4261","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4262","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4263","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4264","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4265","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4266","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4267","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4270","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4272","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4273","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4278","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4284","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4299","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4306","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4309","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4312","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4314","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4315","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4316","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4317","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4318","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4319","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4323","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4345","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4358","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4359","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4361","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4372","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4373","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4375","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4376","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4378","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4382","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4386","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4392","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4416","tags":["web"]},{"url":"https://www.suse.com/support/update/announcement/2019/suse-su-20190092-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1119558","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-11713","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4162","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4163","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4165","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4437","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4438","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4441","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4442","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4443","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-4464","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2018-4213","tags":["report"]},{"url":"https://www.openwall.com/lists/oss-security/2018/09/29/1","tags":["report"]},{"url":"https://webkitgtk.org/security/WSA-2018-0007.html","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-3781-1","tags":["advisory"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-4213","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4191","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4197","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4207","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4208","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4209","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4210","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4212","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4299","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4306","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4309","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4311","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4312","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4314","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4315","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4316","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4317","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4318","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4319","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4323","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4358","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4359","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-4361","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/N3LMCXDRCX64PDIK6OOJOXY7AAXP7POU/#N3LMCXDRCX64PDIK6OOJOXY7AAXP7POU","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2018-4213","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","status":"published","published":"2019-01-11T18:00:00Z","modified":"2024-08-05T05:04:29.876Z","updated_at":"2026-11-02T14:35:08.024147Z"}],"euvd":[{"id":"EUVD-2018-15999","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","status":"published","published":"2019-01-11T18:00:00Z","modified":"2024-08-05T05:04:29Z","updated_at":"2026-11-03T02:40:14.130834Z"}],"ghsa":[{"id":"GHSA-p6hh-6rh4-v28w","title":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS...","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","status":"published","published":"2022-05-14T01:24:07Z","modified":"2023-02-02T05:03:40Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:51:41.084259Z"}],"nvd":[{"id":"CVE-2018-4213","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","status":"published","published":"2019-01-11T18:29:02.377Z","modified":"2026-06-17T01:58:35.953Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"},{"version":"2.0","score":6.8,"vector":"AV:N/AC:M/Au:N/C:P/I:P/A:P","level":"medium","assessor":"primary"}],"cwes":["CWE-20"],"updated_at":"2026-11-02T14:04:53.079938Z"}],"osv":[{"id":"CVE-2018-4213","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","status":"published","published":"2019-01-11T18:29:02.377Z","modified":"2026-03-15T22:26:06.971767Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:44:09.442568Z"},{"id":"DEBIAN-CVE-2018-4213","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","status":"published","published":"2019-01-11T18:29:02.377Z","modified":"2026-10-23T18:04:47.804124229Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"UBUNTU-CVE-2018-4213","description":"In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.","status":"published","published":"2018-09-28T00:00:00Z","modified":"2026-04-22T11:56:00.048391Z","cvss":[{"version":"3.0","score":8.8,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T15:54:18.33562Z"},{"id":"openSUSE-SU-2019:0081-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 to version 2.22.5 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382,\n  CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309,\n  CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,\n  CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4373, CVE-2018-4162, \n  CVE-2018-4163, CVE-2018-4165, CVE-2018-11713, CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210,\n  CVE-2018-4212, CVE-2018-4213, CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443,\n  CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)\n\nThis update was imported from the SUSE:SLE-15:Update update project.","status":"published","published":"2019-03-23T10:47:50Z","modified":"2026-02-04T04:36:42.949762Z","updated_at":"2026-11-02T16:58:30.39372Z"},{"id":"SUSE-SU-2019:0059-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 to version 2.22.4 fixes the following issues:\n\nSecurity issues fixed:\n\n  CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309, CVE-2018-4392,\n  CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318,\n  CVE-2018-4319, CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361,\n  CVE-2018-4345, CVE-2018-4372, CVE-2018-4373, CVE-2018-4375, CVE-2018-4376, CVE-2018-4416,\n  CVE-2018-4378, CVE-2018-4382, CVE-2018-4386 (bsc#1110279, bsc#1116998). \n  ","status":"published","published":"2019-01-10T15:05:15Z","modified":"2026-02-04T02:46:17.761547Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"SUSE-SU-2019:0092-1","title":"Security update for webkit2gtk3","description":"This update for webkit2gtk3 to version 2.22.5 fixes the following issues:\n\nSecurity issues fixed:\n\n- CVE-2018-4372, CVE-2018-4345, CVE-2018-4386, CVE-2018-4375, CVE-2018-4376, CVE-2018-4378, CVE-2018-4382,\n  CVE-2018-4392, CVE-2018-4416, CVE-2018-4191, CVE-2018-4197, CVE-2018-4299, CVE-2018-4306, CVE-2018-4309,\n  CVE-2018-4312, CVE-2018-4314, CVE-2018-4315, CVE-2018-4316, CVE-2018-4317, CVE-2018-4318, CVE-2018-4319,\n  CVE-2018-4323, CVE-2018-4328, CVE-2018-4358, CVE-2018-4359, CVE-2018-4361, CVE-2018-4373, CVE-2018-4162, \n  CVE-2018-4163, CVE-2018-4165, CVE-2018-11713, CVE-2018-4207, CVE-2018-4208, CVE-2018-4209, CVE-2018-4210,\n  CVE-2018-4212, CVE-2018-4213, CVE-2018-4437, CVE-2018-4438, CVE-2018-4441, CVE-2018-4442, CVE-2018-4443,\n  CVE-2018-4464 (bsc#1119558, bsc#1116998, bsc#1110279)\n","status":"published","published":"2019-01-15T13:48:00Z","modified":"2025-05-02T04:07:33.381469Z","updated_at":"2026-11-02T15:53:45.926331Z"},{"id":"USN-3781-1","title":"webkit2gtk vulnerabilities","description":"A large number of security issues were discovered in the WebKitGTK+ Web and\nJavaScript engines. If a user were tricked into viewing a malicious\nwebsite, a remote attacker could exploit a variety of issues related to web\nbrowser security, including cross-site scripting attacks, denial of service\nattacks, and arbitrary code execution.\n","status":"published","published":"2018-10-03T11:33:52Z","modified":"2026-04-22T09:49:17.457935Z","updated_at":"2026-11-02T16:58:14.019824Z"}]}}
