CVE-2018-4391

An inconsistent user interface issue was addressed with improved state management. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, watchOS 4.3, iOS 12.1. Processing a maliciously crafted text message may lead to UI spoofing.

Score

CVSS 3.1 5.5 Medium

Status

Modified - product-security@apple.com

Published

2020-10-27

Last modified

2024-08-05

Affected products

• Iphone Os (Apple)
• Mac Os X (Apple)
• Macos (Apple)
• Watchos (Apple)

References

• https://support.apple.com/en-us/HT208221
• https://support.apple.com/en-us/HT208696
• https://support.apple.com/en-us/HT209192