An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the "CFNetwork" component. It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app.
CVSS Details
- CVSS 3.0 Base Score: 7.8
- CVSS 3.0 Vector: (CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Apple Itunes | — | Upgrade Apple iTunes to the latest version | Nov 13, 2017 | Nov 10, 2017 |
| Apple Osx Cfnetwork | — | Apply OS X security update 2017-001 SierraApply OS X security update 2017-004 El CapitanUpgrade macOS to the latest version | Nov 13, 2017 | Nov 13, 2017 |
| Apple Osx Kernel | — | Apply OS X security update 2017-005 El CapitanUpgrade macOS to the latest versionApply OS X security update 2017-002 Sierra | Dec 7, 2017 | Nov 12, 2017 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub