385
VMScore

CVE-2017-2493

Published: 03/04/2018 Updated: 08/03/2019
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 385
Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N

Vulnerability Summary

An issue exists in certain Apple products. iOS prior to 10.3 is affected. Safari prior to 10.1 is affected. iCloud prior to 6.2 on Windows is affected. tvOS prior to 10.2 is affected. The issue involves the "WebKit" component. It allows remote malicious users to bypass the Same Origin Policy and obtain sensitive information via a crafted elements on a web site.

Vulnerable Product Search on Vulmon Subscribe to Product

apple iphone os

apple safari

apple tvos

apple icloud

Exploits

WebKit suffers from a cross site scripting vulnerability in HTMLObjectElement::updateWidget ...