CVE-2017-7018

HIGH

Apple Products <10.3.3, <10.1.2, <6.2.2, <12.6.2 - RCE/DoS

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2017-7018. PoCs published by Google Security Research.

AI-analyzed exploit summary This PoC exploits a vulnerability in JavaScriptCore's DFG JIT compiler where the scope register of an inline stack entry is incorrectly flushed, leading to a stack layout issue. The provided JavaScript code triggers the bug by using eval and recursive function calls.

Description

An issue was discovered in certain Apple products. iOS before 10.3.3 is affected. Safari before 10.1.2 is affected. iCloud before 6.2.2 on Windows is affected. iTunes before 12.6.2 on Windows is affected. tvOS before 10.2.2 is affected. The issue involves the "WebKit" component. It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Google Security Research · htmldosmultiple
https://www.exploit-db.com/exploits/42373

This PoC exploits a vulnerability in JavaScriptCore's DFG JIT compiler where the scope register of an inline stack entry is incorrectly flushed, leading to a stack layout issue. The provided JavaScript code triggers the bug by using eval and recursive function calls.

Classification
Working Poc 90%
Attack Type
Dos
Complexity
Trivial
Reliability
Reliable
Target: WebKit JavaScriptCore (Safari) versions affected by CVE-2017-7018
No auth needed
Prerequisites: A vulnerable version of WebKit/JavaScriptCore
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (9)

Core 9
Core References
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/99885
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207927
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207924
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207928
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207921
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT207923
Third Party Advisory, VDB Entry exploit x_refsource_exploit-db
https://www.exploit-db.com/exploits/42373/
Third Party Advisory vendor-advisory x_refsource_gentoo
https://security.gentoo.org/glsa/201710-14
Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack
http://www.securitytracker.com/id/1038950

Scores

CVSS v3 8.8
EPSS 0.0347
EPSS Percentile 87.9%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Details

CWE
CWE-119
Status published
Products (6)
apple/icloud < 6.2.2
apple/iphone_os < 10.3.3
apple/itunes < 12.6.2
apple/safari < 10.1.2
apple/tvos < 10.2.2
apple/webkit
Published Jul 20, 2017
Tracked Since Feb 18, 2026