CVE-2017-7038

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/99888Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038950Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201710-14Third Party Advisory
https://support.apple.com/HT207921Vendor Advisory
https://support.apple.com/HT207923Vendor Advisory
https://support.apple.com/HT207924Vendor Advisory
http://www.securityfocus.com/bid/99888Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1038950Third Party Advisory, VDB Entry
https://security.gentoo.org/glsa/201710-14Third Party Advisory
https://support.apple.com/HT207921Vendor Advisory
https://support.apple.com/HT207923Vendor Advisory
https://support.apple.com/HT207924Vendor Advisory

Timeline

Published: Jul 20, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017