# CVE-2018-4117: iTunes: An issue was discovered in certain Apple products.

CVE-2018-4117 is fixed in 6 products on 2 platforms, first by iTunes 12.11.4.15, released August 4, 2021. It is not reported as exploited. Patch Radar priority: Routine.

- Web page: https://patchblox.com/security/cve/CVE-2018-4117
- Priority: Routine
- CVSS: 6.5 (Medium)
- EPSS: 0.0300
- CISA KEV: not listed
- Exploited (vendor report): no
- Publicly disclosed: no
- Published: Apr 2, 2018
- Vendor advisory: https://nvd.nist.gov/vuln/detail/CVE-2018-4117

## Description

An issue was discovered in certain Apple products. iOS before 11.3 is affected. Safari before 11.1 is affected. iCloud before 7.4 on Windows is affected. iTunes before 12.7.4 on Windows is affected. watchOS before 4.3 is affected. The issue involves the fetch API in the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

## Where it's fixed

| Platform | Product | Fixed in | Fix | Released |
|---|---|---|---|---|
| Windows apps | iTunes | 12.11.4.15 | [iTunes 12.11.4.15](https://patchblox.com/security/data/fix/windows-app/apple.itunes-12.11.4.15.md) | Aug 4, 2021 |
| Linux | chromium-browser Ubuntu 18.04.6 LTS (bionic) | 68.0.3440.75-0ubuntu0.18.04.1 | [chromium-browser 68.0.3440.75-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-browser-68.0.3440.75-0ubuntu0.18.04.1.md) | Nov 2, 2021 |
| Linux | chromium-browser-l10n Ubuntu 18.04.6 LTS (bionic) | 68.0.3440.75-0ubuntu0.18.04.1 | [chromium-browser-l10n 68.0.3440.75-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-browser-l10n-68.0.3440.75-0ubuntu0.18.04.1.md) | Nov 2, 2021 |
| Linux | chromium-chromedriver Ubuntu 18.04.6 LTS (bionic) | 68.0.3440.75-0ubuntu0.18.04.1 | [chromium-chromedriver 68.0.3440.75-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-chromedriver-68.0.3440.75-0ubuntu0.18.04.1.md) | Nov 2, 2021 |
| Linux | chromium-codecs-ffmpeg Ubuntu 18.04.6 LTS (bionic) | 68.0.3440.75-0ubuntu0.18.04.1 | [chromium-codecs-ffmpeg 68.0.3440.75-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-68.0.3440.75-0ubuntu0.18.04.1.md) | Nov 2, 2021 |
| Linux | chromium-codecs-ffmpeg-extra Ubuntu 18.04.6 LTS (bionic) | 68.0.3440.75-0ubuntu0.18.04.1 | [chromium-codecs-ffmpeg-extra 68.0.3440.75-0ubuntu0.18.04.1](https://patchblox.com/security/data/fix/linux/ubuntu-bionic-chromium-codecs-ffmpeg-extra-68.0.3440.75-0ubuntu0.18.04.1.md) | Nov 2, 2021 |

---

Data as of 2026-11-07T12:40:37Z UTC. Source: Patchblox Patch Radar (https://patchblox.com/security/patch-radar). Patchblox finds out-of-date software on Windows, macOS and Linux and updates it through release rings: https://patchblox.com/demo