CVE-2018-4293

iTunes: A cookie management issue was addressed with improved checks.

CVE-2018-4293 is fixed in iTunes on 1 platform by iTunes 12.11.4.15 (version 12.11.4.15), released August 4, 2021. It is not reported as exploited. Patch Radar priority: Routine.

Routine
CVSS
5.3
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0134
71st percentile

A cookie management issue was addressed with improved checks. This issue affected versions prior to iOS 11.4.1, macOS High Sierra 10.13.6, tvOS 11.4.1, watchOS 4.3.2, iTunes 12.8 for Windows, iCloud for Windows 7.6.

Where it's fixed

ProductFixed inFixReleased
Windows apps
iTunes 12.11.4.15 iTunes 12.11.4.15 Aug 4, 2021