CVE-2018-4171

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "Bluetooth" component. It allows attackers to obtain sensitive kernel memory-layout information via a crafted app that leverages device properties.

• CWE-200

• http://www.securitytracker.com/id/1041027Third Party Advisory, VDB Entry
• https://support.apple.com/HT208849Vendor Advisory
• http://www.securitytracker.com/id/1041027Third Party Advisory, VDB Entry
• https://support.apple.com/HT208849Vendor Advisory

Published

Jun 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4165An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4166An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4167An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4168An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4169In macOS High Sierra before 10.13.3, Security Update 2018-00…
• CVE-2018-4170An issue was discovered in certain Apple products. macOS bef…
• CVE-2018-4172An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4173An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4174An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4175An issue was discovered in certain Apple products. macOS bef…
• CVE-2018-4176An issue was discovered in certain Apple products. macOS bef…
• CVE-2018-4178A permissions issue existed in which execute permission was …