Race Condition Vulnerability in Apple Storage Component Allows Arbitrary Code Execution

CVE-2018-4154 · HIGH Severity

AV:N/AC:H/AU:N/C:C/I:C/A:C

An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Storage" component. A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app.

Learn more about our Cis Benchmark Audit For Apple Ios.