CVE-2017-7148

low

Published 2017-10-23 · Modified 2026-05-13

CVSS v3

3.3

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

CVSS v2

4.3

VIR risk

3.3

Description

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "Location Framework" component. It allows attackers to obtain sensitive location information via a crafted app that reads the location variable.

Predictions

Exploit likelihood

34%

Patch ETA

—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

vendor Authored 2026-05-27

Vendor advisory: product-security@apple.com — https://support.apple.com/HT208112

OS impact

OS	Version	Status	Fixed in
macos	10.3.3	affected

References

http://www.securityfocus.com/bid/101000
https://support.apple.com/HT208112
http://www.securityfocus.com/bid/101000
https://support.apple.com/HT208112

CWEs

CWE-200

Verify integrity in audit chain (admin only). AS-IS.