CVE-2017-7142

—

CVSS 3.0

5.3 medium

EPSS

2%p76

Published

Oct 23, 2017 (Oct 23, 2017)

Modified

Jun 17, 2026

Description

An issue was discovered in certain Apple products. Safari before 11 is affected. The issue involves the "WebKit Storage" component. It allows attackers to bypass the Safari Private Browsing protection mechanism, and consequently obtain sensitive information about visited web sites.

Vendors: apple
Products: safari
Weakness: CWE-200
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.7%)

In the news0 stories

No ingested article mentions this CVE yet.