CVE-2017-6981

7.8 highEPSS 1.5%

An issue was discovered in certain Apple products. iOS before 10.3.2 is affected. macOS before 10.12.5 is affected. The issue involves the "iBooks" component. It allows attackers to execute arbitrary code in a privileged context via a crafted app that uses symlinks.

Severity

CVSS 3.0

7.8 high

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 1.5% chance of exploitation in the next 30 days; higher than 73% of CVEs (scores of 2026-10-31)
CWE: CWE-59
Published: 2017-05-22
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os
apple:mac_os_x

References

http://www.securitytracker.com/id/1038484
https://support.apple.com/HT207797
https://support.apple.com/HT207798
http://www.securitytracker.com/id/1038484
https://support.apple.com/HT207797

Check your stack JSON