CVE-2017-13839

MEDIUM

macOS < 10.13 - Unauthorized User Data Exposure via Spotlight

Title source: llm
STIX 2.1

Description

An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the "Spotlight" component. It allows local users to see results for other users' files.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_confirm
https://support.apple.com/HT208144

Scores

CVSS v3 5.5
EPSS 0.0028
EPSS Percentile 19.6%
Attack Vector LOCAL
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
apple/mac_os_x 10.13.0
Published Apr 03, 2018
Tracked Since Feb 18, 2026