CVE-2017-7047

CVE-2017-7047 is a critical memory corruption vulnerability in the libxpc component of Apple's iOS, macOS, tvOS, and watchOS operating systems prior to versions 10.3.3, 10.12.6, 10.2.2, and 3.2.3 respectively. An unauthenticated attacker could exploit this flaw via a crafted application to achieve arbitrary code execution in a privileged context or cause a denial of service. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its network-based attack vector and high impact on confidentiality, integrity, and availability. While not listed on CISA's KEV catalog, a public exploit (EDB-42407) exists, demonstrating its exploitability, though there is no evidence of widespread active exploitation or significant community discussion.