{
  "cveId": "CVE-2018-4117",
  "url": "https://patchblox.com/security/cve/CVE-2018-4117",
  "summary": "CVE-2018-4117 is fixed in 6 products on 2 platforms, first by iTunes 12.11.4.15, released August 4, 2021. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "iTunes: An issue was discovered in certain Apple products.",
  "description": "An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the \u0022WebKit\u0022 component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.",
  "published": "2018-04-02T17:00:00Z",
  "severity": "Medium",
  "cvss": 6.5,
  "epss": 0.03003,
  "epssPercentile": 0.87442,
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2018-4117",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "iTunes",
      "fixedVersion": "12.11.4.15",
      "fix": "iTunes 12.11.4.15",
      "url": "https://patchblox.com/security/fix/windows-app/apple.itunes-12.11.4.15",
      "released": "2021-08-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "chromium-browser",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0.3440.75-0ubuntu0.18.04.1",
      "fix": "chromium-browser 68.0.3440.75-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-68.0.3440.75-0ubuntu0.18.04.1",
      "released": "2021-11-02T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "chromium-browser-l10n",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0.3440.75-0ubuntu0.18.04.1",
      "fix": "chromium-browser-l10n 68.0.3440.75-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-browser-l10n-68.0.3440.75-0ubuntu0.18.04.1",
      "released": "2021-11-02T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "chromium-chromedriver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0.3440.75-0ubuntu0.18.04.1",
      "fix": "chromium-chromedriver 68.0.3440.75-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-chromedriver-68.0.3440.75-0ubuntu0.18.04.1",
      "released": "2021-11-02T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "chromium-codecs-ffmpeg",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0.3440.75-0ubuntu0.18.04.1",
      "fix": "chromium-codecs-ffmpeg 68.0.3440.75-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-68.0.3440.75-0ubuntu0.18.04.1",
      "released": "2021-11-02T14:15:00Z"
    },
    {
      "platform": "linux",
      "product": "chromium-codecs-ffmpeg-extra",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "68.0.3440.75-0ubuntu0.18.04.1",
      "fix": "chromium-codecs-ffmpeg-extra 68.0.3440.75-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-68.0.3440.75-0ubuntu0.18.04.1",
      "released": "2021-11-02T14:15:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T12:40:37Z"
}