CVE-2018-4186
UnknownEPSS 0.95%
Last modified
CVE-2018-4186 is a vulnerability of currently unknown severity. In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation.. EPSS estimates a 0.95% chance of exploitation in the next 30 days.
Description
In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Apple | Safari | < 11.1 |
References
- https://support.apple.com/HT208695Vendor Advisory
- https://support.apple.com/HT208695Vendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2018-4186?
In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation.
How severe is CVE-2018-4186?
Severity scoring for CVE-2018-4186 is pending analysis. The EPSS model estimates a 0.95% probability of exploitation in the next 30 days.
How do I fix CVE-2018-4186?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2018-4186?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST