CVE-2017-6977

CVE-2017-6977 is a memory corruption vulnerability in the Speech Framework of Apple macOS versions prior to 10.12.5. This flaw allows a crafted application to achieve sandbox escape or cause a denial of service. With a CVSS score of 8.6 (High), it presents a significant risk, requiring user interaction (UI:R) for an attacker to exploit, but with low attack complexity (AC:L) and local access (AV:L) leading to high impact on confidentiality, integrity, and availability (C:H/I:H/A:H). While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), it garnered some community discussion and media coverage at the time of its disclosure.