AUGUST 4, 2026
Live Feed
Return to register
Case File

CVE-2018-4200

HIGH · CVSS 8.8 EPSS 8.73% Public Exploit

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2018-06-08 · Last synced 2026-08-04

Field Assessment

AI analysis pending.

Exhibit — Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

External Security References
exploit-db.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2018-4200
Severity
HIGH
CVSS
8.8
EPSS
8.73%
Windows

Original Filing — NVD Description

An issue was discovered in certain Apple products. iOS before 11.3.1 is affected. Safari before 11.1 is affected. iCloud before 7.5 on Windows is affected. iTunes before 12.7.5 on Windows is affected. tvOS before 11.4 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site that triggers a WebCore::jsElementScrollHeightGetter use-after-free.