vulnerability

Apple Safari security update for CVE-2017-6974

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:N/I:P/A:N)

Published

Apr 1, 2017

Added

Apr 19, 2017

Modified

Mar 27, 2026

Description

An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the system-installation subsystem of the "System Integrity Protection" component. It allows attackers to modify the contents of a protected disk location via a crafted app.

Solutions

apple-safari-upgrade-10_1apple-safari-windows-uninstall

References

CVE-2017-6974
https://attackerkb.com/topics/CVE-2017-6974
CWE-20
EUVD-EUVD-2017-16012
http://support.apple.com/kb/HT207600
https://euvd.enisa.europa.eu/vulnerability/EUVD-2017-16012

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report