CVE-2017-7161

8.8 highEPSS 2.1%

High (8.8). EPSS 2.1% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.

Severity

CVSS 3.0

8.8 high

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS: 2.1% chance of exploitation in the next 30 days; higher than 81% of CVEs (scores of 2026-10-31)
CWE: CWE-77
Published: 2018-04-03
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

apple:safari
canonical:ubuntu_linux

References

https://support.apple.com/HT208324
https://usn.ubuntu.com/3551-1/
https://support.apple.com/HT208324
https://usn.ubuntu.com/3551-1/

Check your stack JSON