CVE-2018-4174: Medium severity macos high sierra vulnerability
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Mail" component. It allows man-in-the-middle attackers to read S/MIME encrypted messages by leveraging an inconsistency in the user interface.
Other sources
Mail. An inconsistent user interface issue was addressed with improved state management.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-4170
- CVE-2018-4105
- CVE-2018-4112
- CVE-2018-4166
- CVE-2018-4155
- CVE-2018-4158
- CVE-2018-4142
- CVE-2017-13890
- CVE-2017-8816
- CVE-2018-4176
- CVE-2018-4108
- CVE-2017-13080
- CVE-2018-4167
- CVE-2018-4151
- CVE-2018-4132
- CVE-2018-4135
- CVE-2018-4150
- CVE-2018-4104
- CVE-2018-4143
- CVE-2018-4136
- CVE-2018-4160
- CVE-2018-4185
- CVE-2018-4139
- CVE-2018-4175
- CVE-2017-15412
- CVE-2018-4187
- CVE-2018-4179
- CVE-2018-4111
- CVE-2018-4174
- CVE-2018-4152
- CVE-2017-7151
- CVE-2018-4138
- CVE-2018-4107
- CVE-2018-4156
- CVE-2018-4157
- CVE-2018-4298
- CVE-2018-4144
- CVE-2017-13911
- CVE-2018-4173
- CVE-2018-4154
- CVE-2018-4115
- CVE-2018-4106
- CVE-2018-4131
- CVE-2018-4177
- CVE-2018-4123
- CVE-2018-4390
- CVE-2018-4391
- CVE-2018-4168
- CVE-2018-4172
- CVE-2018-4134
- CVE-2018-4137
- CVE-2018-4149
- CVE-2018-4140
- CVE-2018-4148
- CVE-2018-4110
- CVE-2018-4101
- CVE-2018-4114
- CVE-2018-4118
- CVE-2018-4119
- CVE-2018-4120
- CVE-2018-4121
- CVE-2018-4122
- CVE-2018-4125
- CVE-2018-4127
- CVE-2018-4128
- CVE-2018-4129
- CVE-2018-4130
- CVE-2018-4161
- CVE-2018-4162
- CVE-2018-4163
- CVE-2018-4165
- CVE-2018-4113
- CVE-2018-4146
- CVE-2018-4117
- CVE-2018-4207
- CVE-2018-4208
- CVE-2018-4209
- CVE-2018-4210
- CVE-2018-4212
- CVE-2018-4213
- CVE-2018-4145
Frequently Asked Questions
What is CVE-2018-4174?
CVE-2018-4174 is a vulnerability that affects certain versions of Apple iOS and macOS, specifically before iOS 11.3 and before macOS 10.13.4. It is related to the "Mail" component and allows man-in-the-middle attackers to read S/MIME encrypted messages by exploiting a user interface inconsistency.
What is the severity of CVE-2018-4174?
The severity of CVE-2018-4174 is medium, with a CVSS score of 5.9.
How does CVE-2018-4174 affect Apple products?
CVE-2018-4174 affects Apple iOS before 11.3 and macOS before 10.13.4, as well as Apple Sierra, Apple El Capitan, Apple iPhone OS before 11.3, and Apple Mac OS X before 10.13.4.
How can I fix CVE-2018-4174?
To fix CVE-2018-4174, users should update the affected Apple products to iOS 11.3 or later, or macOS 10.13.4 or later.
Where can I find more information about CVE-2018-4174?
You can find more information about CVE-2018-4174 on Apple's official support page: [https://support.apple.com/en-us/HT208693](https://support.apple.com/en-us/HT208693).