CVE-2017-13863: Apple iPhone OS

Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. iOS before 11 is affected. The issue involves the "APNs" component. It allows man-in-the-middle attackers to track users by leveraging the transmission of client certificates.

Affected products

• Apple iPhone OS: before 11.0 (fixed in 11.0)

Published 2018-04-03. Last modified 2026-06-17.