{"id":"CVE-2018-4377","aliases":["EUVD-2018-16163","GHSA-62wm-r84h-xppr"],"status":"published","title":"A cross-site scripting issue existed in Safari. This issue was addressed with improved URL...","description":"A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.","severity":{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-09","score":0.01191,"percentile":0.68199,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-79"],"published":"2019-04-03T17:43:17Z","modified":"2026-06-17T01:58:52Z","products":[{"vendor":"apple","product":"icloud"},{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"itunes"},{"vendor":"apple","product":"safari"},{"vendor":"apple","product":"watchos"}],"references":[{"url":"https://support.apple.com/kb/HT209192","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT209195","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT209197","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT209198","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/kb/HT209196","tags":["x_refsource_MISC","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-4377"},{"url":"https://github.com/advisories/GHSA-62wm-r84h-xppr"}],"sources":{"cve":[{"id":"CVE-2018-4377","description":"A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.","status":"published","published":"2019-04-03T17:43:17Z","modified":"2024-08-05T05:11:22.695Z","updated_at":"2026-11-02T14:35:08.341767Z"}],"euvd":[{"id":"EUVD-2018-16163","description":"A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.","status":"published","published":"2019-04-03T17:43:17Z","modified":"2024-08-05T05:11:22Z","updated_at":"2026-11-03T02:40:13.145443Z"}],"ghsa":[{"id":"GHSA-62wm-r84h-xppr","title":"A cross-site scripting issue existed in Safari. This issue was addressed with improved URL...","description":"A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.","status":"published","published":"2022-05-14T01:12:21Z","modified":"2023-02-02T05:03:15Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:51:36.097719Z"}],"nvd":[{"id":"CVE-2018-4377","description":"A cross-site scripting issue existed in Safari. This issue was addressed with improved URL validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.","status":"published","published":"2019-04-03T18:29:11.673Z","modified":"2026-06-17T01:58:52.733Z","cvss":[{"version":"3.0","score":6.1,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-79"],"updated_at":"2026-11-02T14:04:55.136632Z"}]}}