CVE-2018-4302

A null pointer dereference was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13, iCloud for Windows 7.0, watchOS 4, iOS 11, iTunes 12.7 for Windows. Processing maliciously crafted XML may lead to an unexpected application termination or arbitrary code execution.

• CWE-476

• https://support.apple.com/en-us/HT208112Vendor Advisory
• https://support.apple.com/en-us/HT208115Vendor Advisory
• https://support.apple.com/en-us/HT208141Vendor Advisory
• https://support.apple.com/en-us/HT208142Vendor Advisory
• https://support.apple.com/en-us/HT208144Vendor Advisory
• https://support.apple.com/en-us/HT208112Vendor Advisory
• https://support.apple.com/en-us/HT208115Vendor Advisory
• https://support.apple.com/en-us/HT208141Vendor Advisory
• https://support.apple.com/en-us/HT208142Vendor Advisory
• https://support.apple.com/en-us/HT208144Vendor Advisory

Published

Dec 23, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-4295An input validation issue was addressed with improved input …
• CVE-2018-4296This issue is fixed in macOS Mojave 10.14. A permissions iss…9.8
• CVE-2018-4298In macOS High Sierra before 10.13.3, Security Update 2018-00…
• CVE-2018-4299Multiple memory corruption issues were addressed with improv…
• CVE-2018-4300The session cookie generated by the CUPS web interface was e…
• CVE-2018-4301This issue is fixed in SCSSU-201801. A potential stack based…9.8
• CVE-2018-4303An input validation issue was addressed with improved input …
• CVE-2018-4304A denial of service issue was addressed with improved valida…
• CVE-2018-4305An input validation issue was addressed with improved input …
• CVE-2018-4306A use after free issue was addressed with improved memory ma…
• CVE-2018-4307A logic issue was addressed with improved state management. …
• CVE-2018-4308An out-of-bounds read was addressed with improved bounds che…