CVE-2018-4404

—

CVSS 3.1

8.8 high

EPSS

14%p96

Published

Jan 11, 2019 (Jan 11, 2019)

Modified

Jun 17, 2026

Description

In iOS before 11.4 and macOS High Sierra before 10.13.5, a memory corruption issue exists and was addressed with improved memory handling.

Vendors: apple
Products: iphone os, mac os x
Weakness: CWE-119
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (13.9%)

In the news4 stories

Experts found a macOS version of the sophisticated LightSpy spyware

Security AffairsMay 30, 18:36 UTC · May 30, 2024Malware CVE-2018-4233 CVE-2018-4404

60

New LightSpy spyware variant comes with enhanced data collection features targeting social media platforms

Security AffairsFeb 26, 09:49 UTC · Feb 26, 2025Malware CVE-2018-4233 CVE-2018-4404

35

New LightSpy spyware version targets iPhones

Security AffairsNov 1, 19:51 UTC · Nov 1, 2024Malware CVE-2018-4233 CVE-2018-4404 CVE-2020-9802+1 CVEs

35

LightSpy Spyware's macOS Variant Found with Advanced Surveillance Capabilities

The Hacker NewsJun 10, 04:34 UTC · Jun 10, 2024Malware CVE-2018-4233 CVE-2018-4404

35