CVE-2017-2426

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.12.4

Description The issue is related to the iBooks component and involves a lack of protection for service data. It allows remote attackers to obtain sensitive information from local files via a file: URL in an iBooks file.

Recommendations For macOS versions prior to 10.12.4, update to version 10.12.4 or later to resolve the issue. As a temporary workaround, consider restricting access to the iBooks component to minimize the risk of exploitation. Avoid using the file: URL scheme in iBooks files until the issue is resolved.