Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
4.3

Apple iOS before 11.2: Spoofed Email Addresses on Safari

CVE-2017-7152 · published 8 years ago
Summary

Malicious websites can fake the address bar in Safari, making it look like you're visiting a trusted site. This could trick you into revealing sensitive information or downloading malware. Update to iOS 11.2 or later to fix this issue.

What to do
  • Update apple iphone_os to version 11.2 or later.
Affected software
VendorProductAffected versions
apple iphone_os < 11.2
cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*
Original advisory text
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a ...
An issue was discovered in certain Apple products. iOS before 11.2 is affected. The issue involves the "Mail Message Framework" component. It allows remote attackers to spoof the address bar via a crafted web site.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
4.3 Medium
Exploitation
<1% chance of attack within 30 days
Timeline
Published27 Dec 2017
Updated3 Nov 2026
First seen13 Mar 2026
Sources
CVE-2017-7152 · OSV
CVE-2017-7152 · NVD
Track software like this
Free during beta