High severity8.8NVD Advisory· Published Apr 2, 2017· Updated May 13, 2026
CVE-2017-2446
CVE-2017-2446
Description
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of strict mode functions.
Affected products
3Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
10- www.securityfocus.com/bid/97130nvdThird Party AdvisoryVDB Entry
- support.apple.com/HT207600nvdVendor Advisory
- support.apple.com/HT207601nvdVendor Advisory
- support.apple.com/HT207617nvdVendor Advisory
- www.securitytracker.com/id/1038137nvd
- bugs.chromium.org/p/project-zero/issues/detailnvd
- doar-e.github.io/blog/2018/07/14/cve-2017-2446-or-jscjsglobalobjectishavingabadtime/nvd
- security.gentoo.org/glsa/201706-15nvd
- www.exploit-db.com/exploits/41741/nvd
- www.exploit-db.com/exploits/41742/nvd
News mentions
0No linked articles in our index yet.