CVE-2018-4436

Reference Links

• https://support.apple.com/en-us/HT209340 (Advisory)
• https://support.apple.com/en-us/HT209342 (Advisory)
• https://support.apple.com/en-us/HT209343 (Advisory)
• https://support.apple.com/kb/HT209340
• https://support.apple.com/kb/HT209342
• https://support.apple.com/kb/HT209343

Parent vulnerabilities

(Appears in the following advisories)

• HT209343
• HT209342
• HT209340

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2018-4303
• CVE-2018-4427
• CVE-2018-4431
• CVE-2018-4448
• CVE-2018-4460
• CVE-2018-4447
• CVE-2018-4435
• CVE-2018-4461
• CVE-2018-4429
• CVE-2018-4436
• CVE-2018-4437
• CVE-2018-4464
• CVE-2018-4441
• CVE-2018-4442
• CVE-2018-4443
• CVE-2018-4438
• CVE-2018-4444
• CVE-2018-4465
• CVE-2018-4430
• CVE-2018-4446
• CVE-2018-4439
• CVE-2018-4440
• CVE-2018-4445
• CVE-2018-4428

Frequently Asked Questions

• What is CVE-2018-4436?

  CVE-2018-4436 is a certificate validation issue that existed in configuration profiles in certain Apple software versions.

• How does CVE-2018-4436 affect Apple devices?

  CVE-2018-4436 affects Apple devices running iOS versions prior to 12.1.1, tvOS versions prior to 12.1.1, and watchOS versions prior to 5.1.2.

• What is the severity of CVE-2018-4436?

  The severity of CVE-2018-4436 is high with a CVSS score of 7.5.

• How can I fix CVE-2018-4436?

  To fix CVE-2018-4436, update your Apple device to iOS 12.1.1, tvOS 12.1.1, or watchOS 5.1.2 or later.

• Where can I find more information about CVE-2018-4436?

  More information about CVE-2018-4436 can be found on the Apple support website at the following links: [link1](https://support.apple.com/kb/HT209340), [link2](https://support.apple.com/kb/HT209342), [link3](https://support.apple.com/kb/HT209343).