Sploitus

CVE-2017-2367

4 known exploits for CVE-2017-2367

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site.

Affected products
Safari, Ubuntu, Webkit, Ios, Tvos
Apple Safari
≤ 10.0.3
Apple Iphone Os
≤ 10.2.1
Apple Tvos
≤ 10.1.1
Fix
Available
CVSS 3.0
6.5 MEDIUM
EPSS
6.2% (93th percentile)
NVD status
Modified
Published
2017-04-02
CVE-2017-2367 at NVD
Authoritative description, scoring and affected products

4 known exploits for CVE-2017-2367

Proof-of-concept code and exploit modules indexed by Sploitus

Apple Webkit Named Property UXSS
2017-04-09 Google Security ResearchPACKETSTORM
Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window
2017-04-05 Google Security ResearchZDT
Apple Webkit - Universal Cross-Site Scripting by Accessing a Named Property from an Unloaded Window
2017-04-04 Google Security ResearchEXPLOITDB
Apple Webkit: UXSS by accessing a named property from an unloaded window (CVE-2017-2367)
2017-04-04 RootSEEBUG