CVE-2017-7144

—

CVSS 3.0

4.3 medium

EPSS

1%p70

Published

Oct 23, 2017 (Oct 23, 2017)

Modified

Jun 17, 2026

Description

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "WebKit" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling.

Vendors: apple
Products: safari, iphone os
Weakness: CWE-275
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.