CVE-2017-7109

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. iCloud before 7.0 on Windows is affected. iTunes before 12.7 on Windows is affected. tvOS before 11 is affected. The issue involves the "WebKit" component. A cross-site scripting (XSS) vulnerability allows remote attackers to inject arbitrary web script or HTML via crafted web content that incorrectly interacts with the Application Cache policy.

• CWE-79

• http://www.securityfocus.com/bid/101005Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039384Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039428Third Party Advisory, VDB Entry
• https://support.apple.com/HT208112Vendor Advisory
• https://support.apple.com/HT208113Vendor Advisory
• https://support.apple.com/HT208116Vendor Advisory
• https://support.apple.com/HT208141Vendor Advisory
• https://support.apple.com/HT208142Vendor Advisory
• http://www.securityfocus.com/bid/101005Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039384Third Party Advisory, VDB Entry
• http://www.securitytracker.com/id/1039428Third Party Advisory, VDB Entry
• https://support.apple.com/HT208112Vendor Advisory
• https://support.apple.com/HT208113Vendor Advisory
• https://support.apple.com/HT208116Vendor Advisory
• https://support.apple.com/HT208141Vendor Advisory
• https://support.apple.com/HT208142Vendor Advisory

Published

Oct 23, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7103An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7104An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7105An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7106An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7107An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7108An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7110An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7111An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7112An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7113An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7114An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7115An issue was discovered in certain Apple products. iOS befor…