CVE-2018-4206

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. macOS before 10.13.4 Security Update 2018-001 is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "Crash Reporter" component. It allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted app that replaces a privileged port name.

• CWE-119

• http://www.securityfocus.com/bid/103957Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/103958Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040744Third Party Advisory, VDB Entry
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1529Exploit, Third Party Advisory
• https://support.apple.com/HT208742Vendor Advisory
• https://support.apple.com/HT208743Vendor Advisory
• https://support.apple.com/HT208850Vendor Advisory
• https://support.apple.com/HT208851Vendor Advisory
• https://www.exploit-db.com/exploits/44562/Exploit, Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/103957Third Party Advisory, VDB Entry
• http://www.securityfocus.com/bid/103958Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040744Third Party Advisory, VDB Entry
• https://bugs.chromium.org/p/project-zero/issues/detail?id=1529Exploit, Third Party Advisory
• https://support.apple.com/HT208742Vendor Advisory
• https://support.apple.com/HT208743Vendor Advisory
• https://support.apple.com/HT208850Vendor Advisory
• https://support.apple.com/HT208851Vendor Advisory
• https://www.exploit-db.com/exploits/44562/Exploit, Third Party Advisory, VDB Entry

Published

Jun 8, 2018

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4200An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4201An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4202An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4203An out-of-bounds read was addressed with improved bounds che…
• CVE-2018-4204An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4205An issue was discovered in certain Apple products. Safari be…
• CVE-2018-4207In iOS before 11.3, Safari before 11.1, iCloud for Windows b…
• CVE-2018-4208In iOS before 11.3, Safari before 11.1, iCloud for Windows b…
• CVE-2018-4209In iOS before 11.3, Safari before 11.1, iCloud for Windows b…
• CVE-2018-4210In iOS before 11.3, Safari before 11.1, tvOS before 11.3, wa…
• CVE-2018-4211An issue was discovered in certain Apple products. iOS befor…
• CVE-2018-4212In iOS before 11.3, Safari before 11.1, iCloud for Windows b…