About the security content of iOS 10.3 - Apple Support

BlackTree keeps a versioned source snapshot and links it to relevant CVE reports. The publisher remains authoritative for product applicability, release details and installation guidance.

Read the official article ↗

Publishersupport.apple.com

Article IDNo stable ID in source URL

Verified snapshot17 Oct 2026, 08:14 UTC

Linked CVEs50

Linked CVE reports

These are source relationships, not a claim that this article fixes every affected product or branch.

CVE-2017-2404It allows remote attackers to trigger telephone calls to arbitrary numbers via a tel: URL in a PDF document, as exploited in the wild in October 2016
CVE-2016-9643n/a: Uncontrolled Resource Consumption
CVE-2016-9642JavaScriptCore in WebKit allows attackers to cause a denial of service (out-of-bounds heap read) via a crafted Javascript file
CVE-2016-3619n/a: Out-of-bounds Read
CVE-2017-6976It allows attackers to bypass intended access restrictions (for iCloud user records) via a crafted app
CVE-2017-5029n/a Google Chrome prior to 57.0.2987.98 for Mac, Windows and Linux, and 57.0.2987.108 for Android: Out-of-bounds Write
CVE-2017-2492It allows remote attackers to conduct Universal XSS (UXSS) attacks via a crafted web site that triggers prototype mishandling
CVE-2017-2493It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted elements on a web site
CVE-2017-2483A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2491n/a: Use After Free
CVE-2017-2487It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted font file
CVE-2017-2481It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2474An off-by-one error allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2490It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
CVE-2017-2464It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2482A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2459It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2480It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site
CVE-2017-2444It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2462It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted audio file
CVE-2017-2453It allows remote attackers to spoof FaceTime prompts in the user interface via a crafted web site
CVE-2017-2456A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2475It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted use of frames on a web site
CVE-2017-2467It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted file
CVE-2017-2484It allows attackers to trigger telephone calls to arbitrary numbers via a third-party app
CVE-2017-2461It allows remote attackers to cause a denial of service (resource consumption) via a crafted text message
CVE-2017-2469It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2476It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2466It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2485It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted X.509 certificate file
CVE-2017-2486It allows remote attackers to spoof the address bar via a crafted web site
CVE-2017-2473It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (memory corruption) via a crafted app
CVE-2017-2458A buffer overflow allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2450It allows remote attackers to obtain sensitive information or cause a denial of service (out-of-bounds read and application crash) via a crafted font file
CVE-2017-2472It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (use-after-free) via a crafted app
CVE-2017-2470It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2463It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2452It allows physically proximate attackers to read text messages on the lock screen via unspecified vectors
CVE-2017-2460It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2465It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2447It allows remote attackers to obtain sensitive information or cause a denial of service (memory corruption) via a crafted web site
CVE-2017-2479It allows remote attackers to bypass the Same Origin Policy and obtain sensitive information via a crafted web site
CVE-2017-2454It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2478A race condition allows attackers to execute arbitrary code in a privileged context via a crafted app
CVE-2017-2445It allows remote attackers to conduct Universal XSS (UXSS) attacks via crafted frame objects
CVE-2017-2416It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image file
CVE-2017-2451It allows attackers to execute arbitrary code in a privileged context or cause a denial of service (buffer overflow) via a crafted app
CVE-2017-2471A use-after-free vulnerability allows remote attackers to execute arbitrary code via a crafted web site
CVE-2017-2468It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site
CVE-2017-2457It allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted web site

Source and provenance

Original title: About the security content of iOS 10.3 - Apple Support. Captured 17 Oct 2026, 08:14 UTC. The stored article is used for enrichment and change detection; BlackTree does not republish the publisher's full text here.

Open the publisher's current version ↗