High severity7.8NVD Advisory· Published Apr 3, 2018· Updated Jun 17, 2026

CVE-2017-13854

Description

An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Apple Inc./Darwin Xnuinferred
Range: <4
Apple Inc./Iphone OS
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Range: <11.0
Apple Inc./Mac OS X
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
Range: <10.13.0
Apple Inc./tvOS
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
Range: <11.0
Apple Inc./watchOS
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Range: <4.0
Apple Inc./Kernelllm-fuzzy
Range: <11
Apple Inc./macOSllm-fuzzy
Range: <10.13
Apple Inc./iOSllm-fuzzy
Range: <11

Patches

Vulnerability mechanics

References

support.apple.com/HT208112nvdVendor Advisory
support.apple.com/HT208113nvdVendor Advisory
support.apple.com/HT208115nvdVendor Advisory
support.apple.com/HT208144nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000