CVE-2017-7120

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Metrics

CVSS 3.0 8.8/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-119

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://www.securityfocus.com/bid/101006Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039384Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039428Third Party Advisory, VDB Entry
https://support.apple.com/HT208112Vendor Advisory
https://support.apple.com/HT208113Vendor Advisory
https://support.apple.com/HT208116Vendor Advisory
https://support.apple.com/HT208141Vendor Advisory
https://support.apple.com/HT208142Vendor Advisory
http://www.securityfocus.com/bid/101006Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039384Third Party Advisory, VDB Entry
http://www.securitytracker.com/id/1039428Third Party Advisory, VDB Entry
https://support.apple.com/HT208112Vendor Advisory
https://support.apple.com/HT208113Vendor Advisory
https://support.apple.com/HT208116Vendor Advisory
https://support.apple.com/HT208141Vendor Advisory
https://support.apple.com/HT208142Vendor Advisory

Timeline

Published: Oct 23, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017