Umbra Wiki cve cve/CVE-2018-4344
Back to wiki

CVE-2018-4344 — Apple Multiple Products Memory Corruption Vulnerability

provenance: imported · CVE: CVE-2018-4344 · CWE: CWE-119

CVE-2018-4344: Apple Multiple Products Memory Corruption Vulnerability

CISA Known Exploited Vulnerability (KEV)

Vendor / project Apple
Product Multiple Products
Date added 2022-06-27
Due date 2022-07-18
Ransomware campaign use Unknown

Description

Apple iOS, macOS, tvOS, and watchOS contain a memory corruption vulnerability which can allow for code execution.

Required action (CISA)

Apply updates per vendor instructions.

Notes

https://nvd.nist.gov/vuln/detail/CVE-2018-4344

Weakness behind it

CISA records this vulnerability as an instance of CWE-119. From there the chain continues into CAPEC attack patterns and ATT&CK techniques, all inside this corpus.

References

  • NVD: https://nvd.nist.gov/vuln/detail/CVE-2018-4344
  • KEV catalog: https://www.cisa.gov/known-exploited-vulnerabilities-catalog

See all 1,745 pages under Vulnerabilities (CVE) →