CVE-2017-7038

CVE Database · CVE-2017-7038

CVE-2017-7038

· N/AModified

CVSS v3.1

N/A

EPSS

2.91%

Published

Jul 20, 2017

Modified

May 12, 2026

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A DOMParser XSS issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component.

Weaknesses (CWE)

CWE-79

Affected Products (4)

apple · safari (up to 10.1.2)vulnerable

apple · iphone_os (up to 10.3.3)vulnerable

apple · tvos (up to 10.2.2)vulnerable

apple · webkitvulnerable

References (12)

http://www.securityfocus.com/bid/99888

Third Party AdvisoryVDB Entry

http://www.securitytracker.com/id/1038950

Third Party AdvisoryVDB Entry

https://security.gentoo.org/glsa/201710-14

Third Party Advisory

https://support.apple.com/HT207921

Vendor Advisory

https://support.apple.com/HT207923

Vendor Advisory

https://support.apple.com/HT207924

Vendor Advisory

http://www.securityfocus.com/bid/99888

KEV Catalog EPSS Scores Vendors All CVEs