CVE-2018-4478

  • Last update: Apr 13, 2023

Description

A validation issue was addressed with improved logic. This issue is fixed in macOS High Sierra 10.13.5, Security Update 2018-003 Sierra, Security Update 2018-003 El Capitan. An attacker with physical access to a device may be able to elevate privileges.

Software From Fixed in
apple / mac_os_x - 10.13.5
apple / mac_os_x 10.11 10.11.6
apple / mac_os_x 10.11.6 10.11.6.x
apple / mac_os_x 10.11.6-security_update_2016-001 10.11.6-security_update_2016-001.x
apple / mac_os_x 10.11.6-security_update_2016-002 10.11.6-security_update_2016-002.x
apple / mac_os_x 10.11.6-security_update_2016-003 10.11.6-security_update_2016-003.x
apple / mac_os_x 10.11.6-security_update_2017-001 10.11.6-security_update_2017-001.x
apple / mac_os_x 10.11.6-security_update_2017-002 10.11.6-security_update_2017-002.x
apple / mac_os_x 10.11.6-security_update_2017-003 10.11.6-security_update_2017-003.x
apple / mac_os_x 10.11.6-security_update_2017-004 10.11.6-security_update_2017-004.x
apple / mac_os_x 10.11.6-security_update_2017-005 10.11.6-security_update_2017-005.x
apple / mac_os_x 10.11.6-security_update_2018-001 10.11.6-security_update_2018-001.x
apple / mac_os_x 10.11.6-security_update_2018-002 10.11.6-security_update_2018-002.x
apple / mac_os_x 10.12 10.12.6
apple / mac_os_x 10.12.6 10.12.6.x
apple / mac_os_x 10.12.6-security_update_2017-001 10.12.6-security_update_2017-001.x
apple / mac_os_x 10.12.6-security_update_2017-002 10.12.6-security_update_2017-002.x
apple / mac_os_x 10.12.6-security_update_2018-001 10.12.6-security_update_2018-001.x
apple / mac_os_x 10.12.6-security_update_2018-002 10.12.6-security_update_2018-002.x

Details

    • Severity: Medium
  • CVE: CVE-2018-4478
  • Published: Dec 23, 2021
  • Updated: Apr 13, 2023
  • Exploit:

CVSS v3

  • Severity: Medium
  • Score: 6.8
  • AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2

  • Severity: High
  • Score: 7.2
  • AV:L/AC:L/Au:N/C:C/I:C/A:C

CWEs