CVE-2017-2385

MEDIUM

Apple <10.1 - Info Disclosure

Title source: llm

Description

An issue was discovered in certain Apple products. Safari before 10.1 is affected. The issue involves the "Safari Login AutoFill" component. It allows local users to obtain access to locked keychain items via unspecified vectors.

References (3)

Scores

CVSS v3 5.5
EPSS 0.0006
EPSS Percentile 19.4%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Classification

CWE
CWE-200
Status published

Affected Products (2)

apple/safari < 10.0.3
n/a/n/a

Timeline

Published Apr 02, 2017
Tracked Since Feb 18, 2026