CVE-2017-13785

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

• CWE-119

• http://www.securitytracker.com/id/1039703Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201712-01Third Party Advisory
• https://support.apple.com/HT208219Vendor Advisory
• https://support.apple.com/HT208222Vendor Advisory
• https://support.apple.com/HT208223Vendor Advisory
• https://support.apple.com/HT208224Vendor Advisory
• https://support.apple.com/HT208225Vendor Advisory
• https://www.exploit-db.com/exploits/43170/Exploit, Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039703Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201712-01Third Party Advisory
• https://support.apple.com/HT208219Vendor Advisory
• https://support.apple.com/HT208222Vendor Advisory
• https://support.apple.com/HT208223Vendor Advisory
• https://support.apple.com/HT208224Vendor Advisory
• https://support.apple.com/HT208225Vendor Advisory
• https://www.exploit-db.com/exploits/43170/Exploit, Third Party Advisory, VDB Entry

Published

Nov 13, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13779GSTN_offline_tool in India Goods and Services Tax Network (G…7.8
• CVE-2017-1378IBM Spectrum Protect 7.1 and 8.1 (formerly Tivoli Storage Ma…
• CVE-2017-13780The EyesOfNetwork web interface (aka eonweb) 5.1-0 allows di…
• CVE-2017-13782An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-13783An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13784An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13786An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-13788An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13789An issue was discovered in certain Apple products. Safari be…
• CVE-2017-1379IBM API Connect 5.0.0.0 could allow a remote attacker to obt…
• CVE-2017-13790An issue was discovered in certain Apple products. Safari be…
• CVE-2017-13791An issue was discovered in certain Apple products. iOS befor…