CVE-2017-7089
An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. The issue involves the "WebKit" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that is mishandled during parent-tab processing.
- Apple Safari
- ≤ 10.1.2
- Apple Iphone Os
- ≤ 10.3.3
- Apple Tvos
- ≤ 10.2.2
- Fix
- Available
- CVSS 3.0
- 6.1 MEDIUM
- EPSS
- 6.1% (93th percentile)
- Weakness
- CWE-79
- NVD status
- Modified
- Published
- 2017-10-23
CVE-2017-7089 at NVD
6 known exploits for CVE-2017-7089
Proof-of-concept code and exploit modules indexed by Sploitus
WebKitGTK+ Code Execution / Cookie Handling / Memory Corruption Vulnerabilities
Apple Safari uxss(CVE-2017-7089)
Safari 10 Local SOP bypass Vulnerability
Webkit (Safari) - Universal Cross-site Scripting
Webkit (Safari) - Universal Cross-site Scripting
Exploit for Cross-site Scripting in Apple Safari