CVE-2017-13870

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

• CWE-119

• http://www.securityfocus.com/bid/102181Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040012Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040013Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201801-09Third Party Advisory
• https://support.apple.com/HT208324Vendor Advisory
• https://support.apple.com/HT208326Vendor Advisory
• https://support.apple.com/HT208327Vendor Advisory
• https://support.apple.com/HT208328Vendor Advisory
• https://support.apple.com/HT208334Vendor Advisory
• http://www.securityfocus.com/bid/102181Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040012Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1040013Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201801-09Third Party Advisory
• https://support.apple.com/HT208324Vendor Advisory
• https://support.apple.com/HT208326Vendor Advisory
• https://support.apple.com/HT208327Vendor Advisory
• https://support.apple.com/HT208328Vendor Advisory
• https://support.apple.com/HT208334Vendor Advisory

Published

Dec 25, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-13864An issue was discovered in certain Apple products. iCloud be…
• CVE-2017-13865An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13866An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13867An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13868An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13869An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13871An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-13872An issue was discovered in certain Apple products. macOS Hig…
• CVE-2017-13873An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13874An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-13875An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-13876An issue was discovered in certain Apple products. iOS befor…