CVE-2017-13793

high

Published 2017-11-13 · Modified 2026-05-13

CVSS v3

8.8

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CVSS v2

6.8

VIR risk

8.8

Description

An issue was discovered in certain Apple products. iOS before 11.1 is affected. Safari before 11.0.1 is affected. iCloud before 7.1 on Windows is affected. iTunes before 12.7.1 on Windows is affected. tvOS before 11.1 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Predictions

Exploit likelihood

92%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: debian — https://security-tracker.debian.org/tracker/CVE-2017-13793

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/HT208225

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/HT208224

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/HT208223

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/HT208222

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/HT208219

OS impact

OS	Version	Status	Fixed in
macos		affected	`11.1`
debian	bookworm	fixed	`2.18.1-1`
debian	bullseye	fixed	`2.18.1-1`
debian	forky	fixed	`2.18.1-1`
debian	sid	fixed	`2.18.1-1`
debian	trixie	fixed	`2.18.1-1`

Application impact

Vendor	Product	Versions	Fixed
apple	safari	`{"endExcluding":"11.0.1"}`	`11.0.1`
apple	icloud	`{"endExcluding":"7.1"}`	`7.1`
apple	itunes	`{"endExcluding":"12.7.1"}`	`12.7.1`
apple	webkit	`-`

References

CWEs

CWE-119

Verify integrity in audit chain (admin only). AS-IS.