CVE-2017-2385

CVE-2017-2385 describes a local privilege escalation vulnerability affecting Safari versions prior to 10.1. Specifically, the Safari Login AutoFill component could be exploited by a local user to gain unauthorized access to sensitive keychain items. This vulnerability has a CVSS score of 5.5 (Medium), indicating a low attack complexity and requiring local access, with a high impact on confidentiality but no impact on integrity or availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.