{"id":"CVE-2017-7144","aliases":["EUVD-2017-16182","GHSA-7232-xfcf-h99w"],"status":"published","title":"An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...","description":"An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling.","severity":{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.01339,"percentile":0.71461,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-275"],"published":"2017-10-23T01:00:00Z","modified":"2026-06-17T01:23:45Z","products":[{"vendor":"apple","product":"iphone_os"},{"vendor":"apple","product":"safari"}],"references":[{"url":"http://www.securityfocus.com/bid/100991","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039384","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"http://www.securitytracker.com/id/1039427","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT208112","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://support.apple.com/HT208116","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-7144"},{"url":"https://github.com/advisories/GHSA-7232-xfcf-h99w"}],"sources":{"cve":[{"id":"CVE-2017-7144","description":"An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling.","status":"published","published":"2017-10-23T01:00:00Z","modified":"2024-08-05T15:56:35.999Z","updated_at":"2026-11-02T14:33:20.843976Z"}],"euvd":[{"id":"EUVD-2017-16182","description":"An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling.","status":"published","published":"2017-10-23T01:00:00Z","modified":"2024-08-05T15:56:35Z","updated_at":"2026-11-03T02:39:09.41676Z"}],"ghsa":[{"id":"GHSA-7232-xfcf-h99w","title":"An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is...","description":"An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling.","status":"published","published":"2022-05-17T00:29:52Z","modified":"2023-02-03T05:01:51Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T14:53:03.296613Z"}],"nvd":[{"id":"CVE-2017-7144","description":"An issue was discovered in certain Apple products. iOS before 11 is affected. Safari before 11 is affected. The issue involves the \"WebKit\" component. It allows remote attackers to track Safari Private Browsing users by leveraging cookie mishandling.","status":"published","published":"2017-10-23T01:29:13.987Z","modified":"2026-06-17T01:23:45.283Z","cvss":[{"version":"3.0","score":4.3,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":4.3,"vector":"AV:N/AC:M/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-275"],"updated_at":"2026-11-02T14:04:08.01771Z"}]}}