High severity8.8NVD Advisory· Published Apr 2, 2017· Updated Jun 17, 2026
CVE-2017-2446
CVE-2017-2446
Description
An issue was discovered in certain Apple products. iOS before 10.3 is affected. Safari before 10.1 is affected. tvOS before 10.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code via a crafted web site that leverages the mishandling of strict mode functions.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
7cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*range: <=10.0.3
- (no CPE)range: <10.1
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*range: <=10.1.1
- (no CPE)range: <10.2
- Range: <10.3 (iOS), <10.1 (Safari), <10.2 (tvOS)
- Range: <10.3
Patches
Vulnerability mechanics
References
10- www.securityfocus.com/bid/97130nvdThird Party AdvisoryVDB Entry
- support.apple.com/HT207600nvdVendor Advisory
- support.apple.com/HT207601nvdVendor Advisory
- support.apple.com/HT207617nvdVendor Advisory
- www.securitytracker.com/id/1038137nvd
- bugs.chromium.org/p/project-zero/issues/detailnvd
- doar-e.github.io/blog/2018/07/14/cve-2017-2446-or-jscjsglobalobjectishavingabadtime/nvd
- security.gentoo.org/glsa/201706-15nvd
- www.exploit-db.com/exploits/41741/nvd
- www.exploit-db.com/exploits/41742/nvd
News mentions
0No linked articles in our index yet.