vciy

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari: 23 records in one advisory

23 records announced together, published 2017-10-23, every one of them citing the same advisory.

The advisory

Every record in this batch cites https://support.apple.com/HT208112. That is the CNA's own reference, held in the index, and it is why these records are on one page.

What the records offer

No record in this batch publishes a fixed version in held sources.

No record in this batch is listed by CISA in held sources.

4 of 23 records name something of its own. For the other 19, held sources say the same thing about each.

What this page does not cover

This batch is 23 of the 64 records that cite the same advisory. The other 41 are different findings announced alongside it.

None of those 41 is grouped with any other. Each one has its own record page and nothing else.

The batch is what one advisory announced. It is not every record sharing this weakness, this product or this mechanism, and nothing here is scoped to any estate.

Listed for shared announcement, not shared vulnerability. Each record here is its own finding with its own page, and fixing one does not address another.

CVE-2017-7081no title held
CVE-2017-7085no title held
CVE-2017-7087no title held
CVE-2017-7089conduct universal uxss site
CVE-2017-7090same origin policy
CVE-2017-7091no title held
CVE-2017-7092no title held
CVE-2017-7093no title held
CVE-2017-7094no title held
CVE-2017-7095no title held
CVE-2017-7096no title held
CVE-2017-7098no title held
CVE-2017-7099no title held
CVE-2017-7100no title held
CVE-2017-7102no title held
CVE-2017-7104no title held
CVE-2017-7106no title held
CVE-2017-7107no title held
CVE-2017-7109cross-site scripting vulnerability inject
CVE-2017-7111no title held
CVE-2017-7117no title held
CVE-2017-7120no title held
CVE-2017-7144private browsing

23 records, read from the index as it stood on 2026-09-20. Every row opens the record it names, and every value on that record opens its own receipt.

Everything on this page is free. Public data. Withholding it protects nothing.