CVE-2018-4173

EUVD-2018-15959
An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. The issue involves the "Status Bar" component. It allows invisible microphone access via a crafted app.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
5.5 MEDIUM
LOCAL
LOW
NONE
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 33%
Affected Products (NVD)
VendorProductVersion
appleiphone_os
𝑥
< 11.3
applemac_os_x
𝑥
< 10.13.4
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/HT208692
https://support.apple.com/HT208693
https://support.apple.com/HT208692
https://support.apple.com/HT208693