CVE-2017-2499

7.8 highEPSS 1.0%

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. Safari before 10.1.1 is affected. tvOS before 10.2.1 is affected. The issue involves the "WebKit Web Inspector" component. It allows attackers to execute arbitrary unsigned code or cause a denial of service (memory corruption) via a crafted app.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.0% chance of exploitation in the next 30 days; higher than 64% of CVEs (scores of 2026-10-31)
CWE: CWE-119
Published: 2017-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os
apple:safari
apple:tvos

References

http://www.securityfocus.com/bid/98473
http://www.securitytracker.com/id/1038487
https://support.apple.com/HT207798
https://support.apple.com/HT207801
https://support.apple.com/HT207804

Check your stack JSON