CVE-2018-4246: Incorrect Type Cast
An issue was discovered in certain Apple products. iOS before 11.4 is affected. Safari before 11.1.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. watchOS before 4.3.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages type confusion.
Other sources
WebKit. A type confusion issue was addressed with improved memory handling.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2018-4246?
CVE-2018-4246 is a type confusion issue in WebKit.
Which Apple products are affected by CVE-2018-4246?
iOS before 11.4, Safari before 11.1.1, iCloud before 7.5 on Windows, iTunes before 12.7.5 on Windows, tvOS before 11.4, and watchOS before 4.3.1 are affected.
What is the severity of CVE-2018-4246?
CVE-2018-4246 has a severity score of 8.8, which is considered high.
How can I fix CVE-2018-4246?
Apply the recommended updates or patches provided by Apple or your operating system vendor.
Where can I find more information about CVE-2018-4246?
You can find more information about CVE-2018-4246 at the following references: [1] [2]