CVE-2017-13867

Think of the device’s “Kernel” as the core control center for the system. This flaw lets a malicious app, once you get it installed and running, potentially break into that control center—either taking full control of the device or causing serious crashes. It’s like giving a “wrongdoer” a way to interfere with the device’s core plumbing after you invite them in.

This matters if you run or manage Apple devices using older operating systems: iOS before 11.2, macOS before 10.13.2, tvOS before 11.2, or watchOS before 4.2. It’s not a background drive-by risk in the default setup; an attacker still needs local access and must get you to install or run a malicious app. Only consider it a practical risk if you (or your staff) might install and run untrusted apps on those devices.

This should be treated as a priority update because the flaw can allow a malicious app to execute code with the device’s highest privileges or crash the device. Even though it needs user action (running a malicious app), the availability of a public exploit means attackers may already be able to weaponize it. Per the traffic-light verdict, plan to update promptly (AMBER).