{
  "cveId": "CVE-2018-4212",
  "url": "https://patchblox.com/security/cve/CVE-2018-4212",
  "summary": "CVE-2018-4212 is fixed in 8 products on 2 platforms, first by gir1.2-javascriptcoregtk-4.0 2.22.2-0ubuntu0.18.04.1, released April 3, 2019. It is not reported as exploited. Patch Radar priority: High.",
  "title": "iTunes: In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before\u2026",
  "description": "In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.",
  "published": "2018-09-27T17:00:00Z",
  "severity": "Medium",
  "cvss": 8.8,
  "epss": 0.02064,
  "epssPercentile": 0.81484,
  "priority": "High",
  "priorityTier": 3,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "vendorAdvisory": "https://nvd.nist.gov/vuln/detail/CVE-2018-4212",
  "fixes": [
    {
      "platform": "windows-app",
      "product": "iTunes",
      "fixedVersion": "12.11.4.15",
      "fix": "iTunes 12.11.4.15",
      "url": "https://patchblox.com/security/fix/windows-app/apple.itunes-12.11.4.15",
      "released": "2021-08-04T00:00:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-javascriptcoregtk-4.0",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.22.2-0ubuntu0.18.04.1",
      "fix": "gir1.2-javascriptcoregtk-4.0 2.22.2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-gir1.2-javascriptcoregtk-4.0-2.22.2-0ubuntu0.18.04.1",
      "released": "2019-04-03T11:29:00Z"
    },
    {
      "platform": "linux",
      "product": "gir1.2-webkit2-4.0",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.22.2-0ubuntu0.18.04.1",
      "fix": "gir1.2-webkit2-4.0 2.22.2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-gir1.2-webkit2-4.0-2.22.2-0ubuntu0.18.04.1",
      "released": "2019-04-03T11:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-18",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.22.2-0ubuntu0.18.04.1",
      "fix": "libjavascriptcoregtk-4.0-18 2.22.2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libjavascriptcoregtk-4.0-18-2.22.2-0ubuntu0.18.04.1",
      "released": "2019-04-03T11:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libjavascriptcoregtk-4.0-bin",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.22.2-0ubuntu0.18.04.1",
      "fix": "libjavascriptcoregtk-4.0-bin 2.22.2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libjavascriptcoregtk-4.0-bin-2.22.2-0ubuntu0.18.04.1",
      "released": "2019-04-03T11:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.22.2-0ubuntu0.18.04.1",
      "fix": "libwebkit2gtk-4.0-37 2.22.2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libwebkit2gtk-4.0-37-2.22.2-0ubuntu0.18.04.1",
      "released": "2019-04-03T11:29:00Z"
    },
    {
      "platform": "linux",
      "product": "libwebkit2gtk-4.0-37-gtk2",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.22.2-0ubuntu0.18.04.1",
      "fix": "libwebkit2gtk-4.0-37-gtk2 2.22.2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-libwebkit2gtk-4.0-37-gtk2-2.22.2-0ubuntu0.18.04.1",
      "released": "2019-04-03T11:29:00Z"
    },
    {
      "platform": "linux",
      "product": "webkit2gtk-driver",
      "release": "Ubuntu 18.04.6 LTS (bionic)",
      "fixedVersion": "2.22.2-0ubuntu0.18.04.1",
      "fix": "webkit2gtk-driver 2.22.2-0ubuntu0.18.04.1",
      "url": "https://patchblox.com/security/fix/linux/ubuntu-bionic-webkit2gtk-driver-2.22.2-0ubuntu0.18.04.1",
      "released": "2019-04-03T11:29:00Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-07T18:46:35Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}