CVE-2018-4152: Apple Mac OS X

High severity, CVSS 7.0. EPSS: 1.1% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. macOS before 10.13.4 is affected. The issue involves the "Notes" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

Affected products

• Apple Mac OS X: before 10.13.4 (fixed in 10.13.4)

Published 2018-04-03. Last modified 2026-06-17.