CVE-2017-2391

5.3 mediumEPSS 1.0%

An issue was discovered in certain Apple products. Pages before 6.1, Numbers before 4.1, and Keynote before 7.1 on macOS and Pages before 3.1, Numbers before 3.1, and Keynote before 3.1 on iOS are affected. The issue involves the "Export" component. It allows users to bypass iWork PDF password protection by leveraging use of 40-bit RC4.

Severity

CVSS 3.0

5.3 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
CWE: CWE-326
Published: 2017-04-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:keynote
apple:numbers
apple:pages

References

http://www.securityfocus.com/bid/97126
http://www.securitytracker.com/id/1038134
http://www.securitytracker.com/id/1038135
http://www.securitytracker.com/id/1038136
https://support.apple.com/HT207595

Check your stack JSON