CVE-2017-7148

3.3 lowEPSS 0.6%

Low (3.3) in apple iphone os. EPSS 0.6% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable.

Severity

CVSS 3.0

3.3 low

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

EPSS: 0.6% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-200
Published: 2017-10-23
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:iphone_os

References

http://www.securityfocus.com/bid/101000
https://support.apple.com/HT208112
http://www.securityfocus.com/bid/101000
https://support.apple.com/HT208112

Check your stack JSON