Actively exploited in the wild

Apple Multiple Products Memory Corruption Vulnerability

Apple - Multiple Products · Listed in the CISA KEV since 2022-06-27. This indicates confirmed attacks in production environments.

Required action: Apply updates per vendor instructions.

CVE-2018-4344

HighCVSS 7.8KEV

Published: 03/04/2019(UTC)Updated: 17/06/2026(UTC)Translated: 18/09/2026(UTC)NVD NIST

Summary

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.

Risk Assessment

The vulnerability could lead to memory corruption, potentially allowing an attacker to execute arbitrary code or cause a system crash.

Recommendation

Update iOS, macOS, tvOS, and watchOS to the latest versions that include the fix.

Other vulnerabilities in Apple

CVE-2019-6223HighActively exploited
A logic issue existed in the handling of Group FaceTime calls. The issue was addressed with improved state management. This issue is fixed in iOS 12.1.4, macOS Mojave 10.14.3 Supplemental Update. The initiator of a Group FaceTime call may be able to cause the recipient to answer.

Original NVD description (English source)

A memory corruption issue was addressed with improved memory handling. This issue affected versions prior to iOS 12, macOS Mojave 10.14, tvOS 12, watchOS 5.