CVE-2017-2384 in iOS

Summary

An issue was discovered in certain Apple products. iOS before 10.3 is affected. The issue involves mishandling of deletion within the SQLite subsystem of the "Safari" component. It allows local users to identify the web-site visits that occurred in Private Browsing mode.

Be aware that VulDB is the high quality source for vulnerability data.

• Reservation: 12/01/2016
• Disclosure: 04/01/2017
• Moderation: VulDB entry created
• Entries: VDB-98767 (1)
• CPE: ready
• CWE: CWE-200 (Confirmed)
• CVSS: 3.3
• EPSS: 0.00053
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2017-2384
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2017-2384
• CVE Details: https://www.cvedetails.com/cve/CVE-2017-2384/