CVE-2017-7161: Apple Safari

High severity, CVSS 8.8. EPSS: 2.1% chance of exploitation in the next 30 days.

An issue was discovered in certain Apple products. Safari before 11.0.2 is affected. The issue involves the "WebKit Web Inspector" component. It allows remote attackers to execute arbitrary code via special characters that trigger command injection.

Affected products

• Apple Safari: before 11.0.2 (fixed in 11.0.2)
• Canonical Ubuntu Linux: version 16.04 only; version 17.10 only

Published 2018-04-03. Last modified 2026-06-17.