Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Apple iOS, macOS, tvOS, watchOS may leak app network data

CVE-2017-13873 · published 8 years ago
Summary

Versions of iOS before 11, macOS before 10.13, tvOS before 11 and watchOS before 4 can let a malicious app learn which websites or network services other apps are using. This exposure could reveal business‑critical information about how your employees’ apps communicate. Update the operating systems to the latest versions or apply any patches provided by Apple to stop the leak.

What to do
  • Update apple iphone_os to version 11.0 or later.
  • Update apple mac_os_x to version 10.13 or later.
  • Update apple tvos to version 11.0 or later.
  • Update apple watchos to version 4.0 or later.
Affected software
VendorProductAffected versions
apple iphone_os < 11.0
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
apple mac_os_x < 10.13
cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*
apple tvos < 11.0
cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*
apple watchos < 4.0
cpe:2.3:o:apple:watchos:*:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kerne...
An issue was discovered in certain Apple products. iOS before 11 is affected. macOS before 10.13 is affected. tvOS before 11 is affected. watchOS before 4 is affected. The issue involves the "Kernel" component. It allows attackers to obtain sensitive network-activity information about arbitrary apps via a crafted app.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
<1% chance of attack within 30 days
Type
CWE-200Information Exposure
Timeline
Published3 Apr 2018
Updated3 Nov 2026
First seen29 Sep 2026
Sources
CVE-2017-13873 · NVD
Track software like this
Free during beta