CVE-2018-4213: Apple iCloud

High severity, CVSS 8.8. EPSS: 2% chance of exploitation in the next 30 days.

In iOS before 11.3, Safari before 11.1, iCloud for Windows before 7.4, tvOS before 11.3, watchOS before 4.3, iTunes before 12.7.4 for Windows, unexpected interaction causes an ASSERT failure. This issue was addressed with improved checks.

Affected products

• Apple iCloud: before 7.4 (fixed in 7.4)
• Apple iPhone OS: before 11.3 (fixed in 11.3)
• Apple iTunes: before 12.7.4 (fixed in 12.7.4)
• Apple Safari: before 11.1 (fixed in 11.1)
• Apple tvOS: before 11.3 (fixed in 11.3)
• Apple watchOS: before 4.3 (fixed in 4.3)
• Canonical Ubuntu Linux: version 18.04 only
• WebKitGTK Webkitgtk+: before 2.22.0 (fixed in 2.22.0)

Published 2019-01-11. Last modified 2026-06-17.