{"id":"CVE-2017-13801","aliases":["EUVD-2017-5316","GHSA-cccw-wqgw-rrff"],"status":"published","title":"An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Dictionary Widget\" component. It allows attackers to read local files if pasted text is used in a search.","severity":{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00303,"percentile":0.23253,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-11-13T03:00:00Z","modified":"2026-06-17T01:05:12Z","products":[{"vendor":"apple","product":"mac_os_x"}],"references":[{"url":"https://support.apple.com/HT208221","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1039710","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13801"},{"url":"https://github.com/advisories/GHSA-cccw-wqgw-rrff"}],"sources":{"cve":[{"id":"CVE-2017-13801","description":"An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Dictionary Widget\" component. It allows attackers to read local files if pasted text is used in a search.","status":"published","published":"2017-11-13T03:00:00Z","modified":"2024-08-05T19:13:39.882Z","updated_at":"2026-11-02T14:33:17.59533Z"}],"euvd":[{"id":"EUVD-2017-5316","description":"An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Dictionary Widget\" component. It allows attackers to read local files if pasted text is used in a search.","status":"published","published":"2017-11-13T03:00:00Z","modified":"2024-08-05T19:13:39Z","updated_at":"2026-11-03T02:23:18.651125Z"}],"ghsa":[{"id":"GHSA-cccw-wqgw-rrff","title":"An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Dictionary Widget\" component. It allows attackers to read local files if pasted text is used in a search.","status":"published","published":"2022-05-17T00:21:33Z","modified":"2023-02-03T05:01:35Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:00.497966Z"}],"nvd":[{"id":"CVE-2017-13801","description":"An issue was discovered in certain Apple products. macOS before 10.13.1 is affected. The issue involves the \"Dictionary Widget\" component. It allows attackers to read local files if pasted text is used in a search.","status":"published","published":"2017-11-13T03:29:00.943Z","modified":"2026-06-17T01:05:12.183Z","cvss":[{"version":"3.0","score":3.3,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","level":"low","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:04:08.635428Z"}]}}