CVE-2018-4173

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app.

• CWE-269

• https://support.apple.com/HT208692Vendor Advisory
• https://support.apple.com/HT208693Vendor Advisory
• https://support.apple.com/HT208692Vendor Advisory
• https://support.apple.com/HT208693Vendor Advisory

Published

Apr 13, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4167An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4168An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4169In macOS High Sierra before 10.13.3, Security Update 2018-00…
• CVE-2018-4170An issue was discovered in certain Apple products. macOS bef…
• CVE-2018-4171An issue was discovered in certain Apple products. macOS bef…
• CVE-2018-4172An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4174An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4175An issue was discovered in certain Apple products. macOS bef…
• CVE-2018-4176An issue was discovered in certain Apple products. macOS bef…
• CVE-2018-4178A permissions issue existed in which execute permission was …
• CVE-2018-4179In macOS High Sierra before 10.13.4, there was an issue with…
• CVE-2018-4180In macOS High Sierra before 10.13.5, an issue existed in CUP…