| Max CVSS | 10.0 | Min CVSS | 2.1 | Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published | |
| CVE-2017-2404 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Quick Look" component. It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited i
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2412 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "iTunes Store" component. It allows man-in-the-middle attackers to modify the client-server data stream to iTunes sandbox web services by leveragin
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2399 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Pasteboard" component. It allows physically proximate attackers to read the pasteboard by leveraging the use of an encryption key derived only fro
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2484 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Phone" component. It allows attackers to trigger telephone calls to arbitrary numbers via a third-party app.
|
03-10-2019 - 00:03 | 02-04-2017 - 01:59 | |
| CVE-2017-2452 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Siri" component. It allows physically proximate attackers to read text messages on the lock screen via unspecified vectors.
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2400 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "SafariViewController" component. It allows attackers to obtain sensitive information by leveraging the SafariViewController's incorrect synchroniz
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2434 | 10.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "HomeKit" component. It allows attackers to have an unspecified impact by leveraging the presence of Home Control on Control Center.
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2414 | 5.0 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "DataAccess" component. It allows remote attackers to access Exchange traffic in opportunistic circumstances by leveraging a mistake in typing an e
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2384 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in P
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2393 | 4.3 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Safari Reader" component. It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site.
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 | |
| CVE-2017-2397 | 2.1 |
An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves the "Accounts" component. It allows physically proximate attackers to discover an Apple ID by reading an iCloud authentication prompt on the lock scree
|
12-07-2017 - 01:29 | 02-04-2017 - 01:59 |