VulnerabilityModified
CVE-2017-7151
A race condition was addressed with additional validation.
HIGH 7.0EPSS 1.00%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.00%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
A race condition was addressed with additional validation. This issue affected versions prior to iOS 11.2, macOS High Sierra 10.13.2, tvOS 11.2, watchOS 4.2, iTunes 12.7.2 for Windows, macOS High Sierra 10.13.4.
- CVSS 3.0
- 7.0 HIGHCVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
- EPSS
- 1.00% probability · 61th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-362
- Affected
- apple/iphone os · apple/mac os x · apple/tvos · apple/watchos · apple/itunes
- Source
- product-security@apple.com
References
- https://support.apple.com/kb/HT208325Vendor Advisory
- https://support.apple.com/kb/HT208326Vendor Advisory
- https://support.apple.com/kb/HT208327Vendor Advisory
- https://support.apple.com/kb/HT208331Vendor Advisory
- https://support.apple.com/kb/HT208334Vendor Advisory
- https://support.apple.com/kb/HT208692Vendor Advisory
- https://support.apple.com/kb/HT208325Vendor Advisory
- https://support.apple.com/kb/HT208326Vendor Advisory
- https://support.apple.com/kb/HT208327Vendor Advisory
- https://support.apple.com/kb/HT208331Vendor Advisory
- https://support.apple.com/kb/HT208334Vendor Advisory
- https://support.apple.com/kb/HT208692Vendor Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.