vciy

An issue was discovered in certain Apple products. iOS before 10.3 is affected. macOS: 33 records in one advisory

33 records announced together, published 2017-04-02, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://support.apple.com/HT207617. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

13 of 33 records name something of its own. For the other 20, held sources say the same thing about each.

What this page does not cover

This batch is 33 of the 87 records that cite the same advisory. The other 54 are different findings announced alongside it.

None of those 54 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2017-2379carbon dfont
CVE-2017-2390symlink libarchive change directory
CVE-2017-2398no title held
CVE-2017-2401no title held
CVE-2017-2406no title held
CVE-2017-2407no title held
CVE-2017-2416no title held
CVE-2017-2417infinite recursion
CVE-2017-2423successful result seckeyrawverify api
CVE-2017-2428nghttp2 httpprotocol http/2 servers
CVE-2017-2430no title held
CVE-2017-2435no title held
CVE-2017-2439no title held
CVE-2017-2441libc++abi vulnerability mishandled demangling
CVE-2017-2448keychain keychain secret mechanism
CVE-2017-2450no title held
CVE-2017-2451no title held
CVE-2017-2456no title held
CVE-2017-2458keyboards
CVE-2017-2461resource consumption message
CVE-2017-2462no title held
CVE-2017-2467no title held
CVE-2017-2472no title held
CVE-2017-2473no title held
CVE-2017-2474off-by-one error
CVE-2017-2478no title held
CVE-2017-2482no title held
CVE-2017-2483no title held
CVE-2017-2487no title held
CVE-2017-2490no title held

33 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.