CVE-2018-4230

3 known exploits for CVE-2018-4230

An issue was discovered in certain Apple products. macOS before 10.13.5 is affected. The issue involves the "NVIDIA Graphics Drivers" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that triggers a SetAppSupportBits use-after-free because of a race condition.

Affected products: Nvidia Graphics Drivers, Apple Macos
Apple Mac Os X: < 10.13.5

Fix: Available
CVSS 2.0: 7.6 HIGH
CVSS 3.1: 7.0 HIGH
EPSS: 4.1% (90th percentile)
Weakness: CWE-362
NVD status: Modified
Published: 2018-06-08

CVE-2018-4230 at NVD

Authoritative description, scoring and affected products

MacOS kernel UAF due to lack of locking in nvidia GeForce driver(CVE-2018-4230)

2018-06-08 KnownsecSEEBUGC

macOS #Kernel - Use-After-Free Due to Lack of Locking in nvidia GeForce Driver Exploit

2018-06-06 Google Security ResearchZDTC

Apple macOS Kernel - Use-After-Free Due to Lack of Locking in nvidia GeForce Driver

2018-06-06 Google Security ResearchEXPLOITDBC