CVE-2018-4133: An issue was discovered in certain Apple products.

Security readout for executives and security teams

CVE-2018-4133 is a Safari WebKit cross-site scripting issue fixed in Safari 11.1. A remote attacker could use a crafted URL to inject script or HTML into a browsing context. This is mainly a legacy browser exposure concern unless old Safari or referenced WebKit packages remain deployed. Likely exposure is limited to systems still running Safari before 11.1. Gentoo and Ubuntu advisories are referenced, so Linux WebKit package exposure should be confirmed from those vendor advisories if those platforms are in scope. Treat this as a legacy exposure cleanup item, not an emergency, unless old Safari or affected WebKit packages are still used by high-risk users. Mitigation focus: Upgrade Safari to 11.1 or later where Safari is in use.; Apply relevant Gentoo or Ubuntu WebKit security updates where those systems are in scope.; Remove or isolate unsupported systems that cannot receive vendor browser updates..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.