CVE-2017-2355

An issue was discovered in certain Apple products. iOS before 10.2.1 is affected. Safari before 10.0.3 is affected. iCloud before 6.1.1 is affected. iTunes before 12.5.5 is affected. tvOS before 10.1.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (uninitialized memory access and application crash) via a crafted web site.

• CWE-119

• http://www.securityfocus.com/bid/95736Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037668Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201706-15Third Party Advisory
• https://support.apple.com/HT207481Vendor Advisory
• https://support.apple.com/HT207482Vendor Advisory
• https://support.apple.com/HT207484Vendor Advisory
• https://support.apple.com/HT207485Vendor Advisory
• https://support.apple.com/HT207486Vendor Advisory
• http://www.securityfocus.com/bid/95736Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1037668Third Party Advisory, VDB Entry
• https://security.gentoo.org/glsa/201706-15Third Party Advisory
• https://support.apple.com/HT207481Vendor Advisory
• https://support.apple.com/HT207482Vendor Advisory
• https://support.apple.com/HT207484Vendor Advisory
• https://support.apple.com/HT207485Vendor Advisory
• https://support.apple.com/HT207486Vendor Advisory

Published

Feb 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-2349A command injection vulnerability in the IDP feature of Juni…9.9
• CVE-2017-2350An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-2351An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-2352An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-2353An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-2354An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-2356An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-2357An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-2358An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-2359An issue was discovered in certain Apple products. Safari be…
• CVE-2017-2360An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-2361An issue was discovered in certain Apple products. macOS bef…