{"id":"CVE-2017-2384","url":"https://www.cyber-defence.io/tools/cve/CVE-2017-2384","generatedAt":"2026-10-28T21:18:03.985Z","title":"It allows local users to identify the web-site visits that occurred in Private Browsing mode.","description":"An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the \"Safari\" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode.","published":"2017-04-02T01:59:00.000Z","lastModified":"2026-06-17T01:16:06.000Z","status":"Modified","sourceIdentifier":"product-security@apple.com","cvss":{"version":"3.0","score":3.3,"severity":"LOW","vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N"},"cwe":["CWE-200"],"affected":["apple/iphone os"],"epss":{"score":0.00319,"percentile":0.24674,"date":"2026-10-27","history":[]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"low","text":"Lower severity and a low EPSS score (0.32%). Track it; it rarely justifies an emergency change on its own."},"changes":[],"references":[{"url":"http://www.securityfocus.com/bid/97138","source":"product-security@apple.com"},{"url":"http://www.securitytracker.com/id/1038139","source":"product-security@apple.com"},{"url":"https://support.apple.com/HT207617","source":"product-security@apple.com"},{"url":"http://www.securityfocus.com/bid/97138","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"http://www.securitytracker.com/id/1038139","source":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://support.apple.com/HT207617","source":"af854a3a-2127-422b-91ae-364da2661108"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2017-2384","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}