CVE-2017-2491

—

CVSS 3.0

8.8 high

EPSS

8%p94

Published

Jun 27, 2017 (Jun 27, 2017)

Modified

Jun 17, 2026

Description

Use after free vulnerability in the String.replace method JavaScriptCore in Apple Safari in iOS before 10.3 allows remote attackers to execute arbitrary code via a crafted web page, or a crafted file.

Vendors: apple
Products: iphone os
Weakness: CWE-416
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (8.0%)

In the news0 stories

No ingested article mentions this CVE yet.