CVE-2017-13892

HIGH

macOS < 10.13.2 - Unprotected User Data Exposure via Contact Sharing

Title source: llm
STIX 2.1

Description

An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing.

References (1)

Core 1
Core References
Vendor Advisory x_refsource_misc
https://support.apple.com/en-us/HT208331

Scores

CVSS v3 7.5
EPSS 0.0093
EPSS Percentile 56.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Details

Status published
Products (4)
apple/mac_os_x 10.11.6 (8 CPE variants)
apple/mac_os_x 10.12.6 (2 CPE variants)
apple/mac_os_x 10.11 - 10.11.6
apple/macos < 10.13.2
Published Dec 23, 2021
Tracked Since Feb 18, 2026