{"id":"CVE-2018-4221","aliases":["EUVD-2018-16007","GHSA-vr7w-7rr7-4c5c"],"status":"published","title":"An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10...","description":"An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the \"Security\" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.01224,"percentile":0.68983,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2018-06-08T18:00:00Z","modified":"2026-06-17T01:58:36Z","products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"mac_os_x"}],"references":[{"url":"http://www.securitytracker.com/id/1041027","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securityfocus.com/bid/104897","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT208848","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/HT208849","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4221"},{"url":"https://github.com/advisories/GHSA-vr7w-7rr7-4c5c"}],"sources":{"cve":[{"id":"CVE-2018-4221","description":"An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the \"Security\" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.","status":"published","published":"2018-06-08T18:00:00Z","modified":"2024-08-05T05:04:30.07Z","updated_at":"2026-11-02T14:35:08.341767Z"}],"euvd":[{"id":"EUVD-2018-16007","description":"An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the \"Security\" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.","status":"published","published":"2018-06-08T18:00:00Z","modified":"2024-08-05T05:04:30Z","updated_at":"2026-11-03T02:40:14.130834Z"}],"ghsa":[{"id":"GHSA-vr7w-7rr7-4c5c","title":"An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10...","description":"An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the \"Security\" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.","status":"published","published":"2022-05-14T01:27:12Z","modified":"2023-02-02T05:03:46Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:51:42.915943Z"}],"nvd":[{"id":"CVE-2018-4221","description":"An issue was discovered in certain Apple products. iOS before 11.4 is affected. macOS before 10.13.5 is affected. The issue involves the \"Security\" component. It allows web sites to track users by leveraging the transmission of S/MIME client certificates.","status":"published","published":"2018-06-08T18:29:01.447Z","modified":"2026-06-17T01:58:36.817Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:28.483469Z"}]}}