CVE-2018-4374
iTunes: A logic issue was addressed with improved validation.
CVE-2018-4374 is fixed in iTunes on 1 platform by iTunes 12.11.4.15 (version 12.11.4.15), released August 4, 2021. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
6.1
No vendor severity
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0218
82nd percentile
A logic issue was addressed with improved validation. This issue affected versions prior to iOS 12.1, watchOS 5.1, Safari 12.0.1, iTunes 12.9.1, iCloud for Windows 7.8.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Windows apps | |||
| iTunes | 12.11.4.15 | iTunes 12.11.4.15 | Aug 4, 2021 |