CVE-2018-4278: Medium severity tvos vulnerability
In Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6, sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.
Other sources
WebKit. Sound fetched through audio elements may be exfiltrated cross-origin. This issue was addressed with improved audio taint tracking.
Credit
Affected Software
Event History
Parent advisories
This vulnerability appears in the following advisories.
Peer vulnerabilities
Found alongside the following vulnerabilities.
- CVE-2018-4293
- CVE-2018-4269
- CVE-2018-4282
- CVE-2018-4280
- CVE-2018-4248
- CVE-2018-4277
- CVE-2018-4270
- CVE-2018-4278
- CVE-2018-4284
- CVE-2018-4266
- CVE-2018-4261
- CVE-2018-4262
- CVE-2018-4263
- CVE-2018-4264
- CVE-2018-4265
- CVE-2018-4267
- CVE-2018-4272
- CVE-2018-4271
- CVE-2018-4273
- CVE-2018-4145
- CVE-2018-4279
- CVE-2018-4362
- CVE-2018-4274
- CVE-2018-4260
- CVE-2018-4327
- CVE-2018-4290
- CVE-2018-4216
- CVE-2018-4275
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is CVE-2018-4278.
What is the severity of CVE-2018-4278?
The severity of CVE-2018-4278 is medium.
Which software versions are affected by CVE-2018-4278?
Safari before 11.1.2, iTunes before 12.8 for Windows, iOS before 11.4.1, tvOS before 11.4.1, iCloud for Windows before 7.6.
How can the CVE-2018-4278 vulnerability be exploited?
The CVE-2018-4278 vulnerability can be exploited by exfiltrating sound through audio elements across different origins.
How was the CVE-2018-4278 vulnerability addressed?
The CVE-2018-4278 vulnerability was addressed with improved audio taint tracking.