CVE-2017-2471

An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. watchOS before 3.2 is affected. The issue involves the "WebKit" component. A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site.

Affected products

Safari, Ubuntu, Webkit, Ios, Watchos

Apple Safari

= 10.0.3

Apple Iphone Os

= 10.2.1

Apple Watchos

= 3.1.3

Fix

Available

CVSS 3.0

8.8 HIGH

EPSS

8.5% (94th percentile)

Weakness

CWE-416

NVD status

Modified

Published

2017-04-02