CVE-2017-13864

5.9 mediumEPSS 0.7%

Medium (5.9) in apple. EPSS 0.7% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. The issue involves the "APNs Server" component. It allows man-in-the-middle attackers to track users by leveraging mishandling of client certificates.

Severity

CVSS 3.0

5.9 medium

CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-12-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:icloud
apple:itunes

References

http://www.securityfocus.com/bid/102192
http://www.securitytracker.com/id/1040013
https://support.apple.com/HT208326
https://support.apple.com/HT208328
http://www.securityfocus.com/bid/102192

Check your stack JSON