Apple Support vulnerabilities

2 CVEs affecting Apple Support, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2018-4397, published 2019-04-03.

More from Apple.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2017-7147, published 2017-10-23. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. An issue was discovered in certain Apple products. The Apple Support app before 1.2 for iOS is affected. The issue involves the "Analytics" component. It allows remote attackers to obtain sensitive…
• CVE-2018-4397, published 2019-04-03. Medium severity, CVSS 4.3. EPSS: 0.8% chance of exploitation in the next 30 days. Analytics data was sent using HTTP rather than HTTPS. This was addressed by sending analytics data using HTTPS. This issue affected versions prior to Apple Support 2.4 for iOS.