CVE-2017-7085

An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the "Safari" component. It allows remote attackers to spoof the address bar.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N
appleCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 72%
VendorProductVersion
applesafari
𝑥
≤ 10.1.2
appleiphone_os
𝑥
≤ 10.3.3
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.securityfocus.com/bid/100895
http://www.securitytracker.com/id/1039384
http://www.securitytracker.com/id/1039385
https://support.apple.com/HT208112
https://support.apple.com/HT208116
http://www.securityfocus.com/bid/100895
http://www.securitytracker.com/id/1039384
http://www.securitytracker.com/id/1039385
https://support.apple.com/HT208112
https://support.apple.com/HT208116