First published: Mon Mar 27 2017(Updated: )
WebKit. A prototype access issue was addressed through improved exception handling.
Credit: André Bargull product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iOS, iPadOS, and watchOS | <10.3 | 10.3 |
Apple Mobile Safari | <=10.0.3 | |
iStyle @cosme iPhone OS | <=10.2.1 | |
tvOS | <=10.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2017-2386 has been classified with high severity due to its potential for remote code execution.
To fix CVE-2017-2386, users should update affected devices to iOS 10.3, Safari 10.1, or tvOS 10.2.
CVE-2017-2386 affects Apple iOS versions prior to 10.3, Safari versions before 10.1, and tvOS versions before 10.2.
Yes, CVE-2017-2386 can be exploited remotely, allowing attackers to gain unauthorized access to affected devices.
Yes, the issue in CVE-2017-2386 involves the WebKit component of affected Apple products.