PT-2017-17470
CVE-2017-7038
·
Published
2017-07-20
·
Updated
2025-09-29
Description by
CVSS 3.1
6.1
MediumMetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Apple iOS versions prior to 10.3.3
Apple Safari versions prior to 10.1.2
Apple tvOS versions prior to 10.2.2
Description
A DOMParser XSS issue was discovered in certain Apple products, involving the WebKit component.
Recommendations
For iOS versions prior to 10.3.3, update to version 10.3.3 or later.
For Safari versions prior to 10.1.2, update to version 10.1.2 or later.
For tvOS versions prior to 10.2.2, update to version 10.2.2 or later.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾