Skip to content
OpenAdvisories
Unscored CVE-2018-4086 EUVD-2018-15872GHSA-qcgf-5889-9273

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is a…

Published Apr 3, 2018 · Updated Aug 5, 2024 · Assigned by apple

Description

An issue was discovered in certain Apple products. iOS before 11.2.5 is affected. macOS before 10.13.3 is affected. tvOS before 11.2.5 is affected. watchOS before 4.2.2 is affected. The issue involves the "Security" component. It allows remote attackers to spoof certificate validation via crafted name constraints.

References