Apple Security Advisories · August 2017 — Apple Security Advisories
14 advisories 14 CVEs 1 EXPLOITED

Apple-vendor CVEs for 2017-08. Mirrored into Vulnetix VDB.

Every advisory below is enriched with the Vulnetix VDB exploit-intelligence chip (hover a CVE ID in the interactive page to see CVSS, EPSS, KEV status, and PoC maturity). 1 is already weaponised in the wild — see the Exploited section.

What would you fix first?

The advisories below are ordered by the Vulnetix risk prioritization strategy: exploitation evidence first, scores second. On the interactive page you can switch to three other lenses.

Advisories

CVE-2017-13798

tvOSExploitedVulnCheck KEV listedCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13798

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13794

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13794

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13783

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13783

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13791

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13791

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13796

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13796

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13784

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13784

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13785

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13785

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13792

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13792

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13795

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13795

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13802

tvOSWeaponized exploitCRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13802

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2015-3206

OtherEPSS <= 49%HIGH2017-08-25

The checkPassword function in python-kerberos does not authenticate the KDC it attempts to communicate with, which allows remote attackers to cause a denial of service (bad response), or have other unspecified impact by performing a man-in-the-middle a...

CVEs:CVE-2015-3206

Affected products

ProductStatusVendorPackageEcosystem
pykerberos affected apple
Upstream advisory

CVE-2017-13788

tvOSEPSS <= 49%CRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13788

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13793

tvOSEPSS <= 49%CRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13793

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

CVE-2017-13803

tvOSEPSS <= 49%CRITICAL2017-08-30

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves th...

CVEs:CVE-2017-13803

Affected products

ProductStatusVendorPackageEcosystem
icloud affected apple
iphone_os affected apple
itunes affected apple
safari affected apple
tvos affected apple
webkit affected apple
Upstream advisory

Need live exploit intelligence?

Every CVE above is indexed in the Vulnetix VDB with KEV, EPSS, and PoC maturity. The interactive page surfaces that on hover.