CVE-2017-7153

An issue was discovered in certain Apple products. iOS before 11.2 is affected. Safari before 11.0.2 is affected. iCloud before 7.2 on Windows is affected. iTunes before 12.7.2 on Windows is affected. tvOS before 11.2 is affected. watchOS before 4.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to spoof user-interface information (about whether the entire content is derived from a valid TLS session) via a crafted web site that sends a 401 Unauthorized redirect.

• CWE-601

• https://support.apple.com/HT208324Vendor Advisory
• https://support.apple.com/HT208325Vendor Advisory
• https://support.apple.com/HT208326Vendor Advisory
• https://support.apple.com/HT208327Vendor Advisory
• https://support.apple.com/HT208328Vendor Advisory
• https://support.apple.com/HT208334Vendor Advisory
• https://usn.ubuntu.com/3551-1/Third Party Advisory
• https://support.apple.com/HT208324Vendor Advisory
• https://support.apple.com/HT208325Vendor Advisory
• https://support.apple.com/HT208326Vendor Advisory
• https://support.apple.com/HT208327Vendor Advisory
• https://support.apple.com/HT208328Vendor Advisory
• https://support.apple.com/HT208334Vendor Advisory
• https://usn.ubuntu.com/3551-1/Third Party Advisory

Published

Apr 3, 2018

Last Modified

Jun 17, 2026

Status

Modified

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-7147An issue was discovered in certain Apple products. The Apple…
• CVE-2017-7148An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7149An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-7150An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-7151A race condition was addressed with additional validation. T…
• CVE-2017-7152An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7154An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7155An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-7156An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7157An issue was discovered in certain Apple products. iOS befor…
• CVE-2017-7158An issue was discovered in certain Apple products. macOS bef…
• CVE-2017-7159An issue was discovered in certain Apple products. macOS bef…