First published: Thu Mar 29 2018(Updated: )
In Safari before 11.1, an information leakage issue existed in the handling of downloads in Safari Private Browsing. This issue was addressed with additional validation.
Credit: product-security@apple.com an anonymous researcher
Affected Software | Affected Version | How to fix |
---|---|---|
Apple Safari | <11.1 | |
Apple Safari | <11.1 | 11.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2018-4186 is an information leakage issue in the handling of downloads in Safari Private Browsing.
CVE-2018-4186 affects Safari versions before 11.1.
CVE-2018-4186 has a severity rating of 7.5 (high).
To fix CVE-2018-4186, update Safari to version 11.1 or higher.
More information about CVE-2018-4186 can be found in the official Apple Security Advisory: [https://support.apple.com/en-us/HT208695](https://support.apple.com/en-us/HT208695)