{"id":"CVE-2017-13837","aliases":["EUVD-2017-5352","GHSA-8cf6-g25c-xm2m"],"status":"published","title":"An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Installer\" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.","severity":{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00929,"percentile":0.60814,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"published":"2018-04-03T06:00:00Z","modified":"2026-06-17T01:05:15Z","products":[{"vendor":"apple","product":"mac_os_x"}],"references":[{"url":"https://support.apple.com/HT208144","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-13837"},{"url":"https://github.com/advisories/GHSA-8cf6-g25c-xm2m"}],"sources":{"cve":[{"id":"CVE-2017-13837","description":"An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Installer\" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.","status":"published","published":"2018-04-03T06:00:00Z","modified":"2024-08-05T19:13:40.824Z","updated_at":"2026-11-02T14:33:17.903346Z"}],"euvd":[{"id":"EUVD-2017-5352","description":"An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Installer\" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.","status":"published","published":"2018-04-03T06:00:00Z","modified":"2024-08-05T19:13:40Z","updated_at":"2026-11-03T02:23:18.651125Z"}],"ghsa":[{"id":"GHSA-8cf6-g25c-xm2m","title":"An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Installer\" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.","status":"published","published":"2022-05-13T01:43:16Z","modified":"2023-02-02T05:00:52Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high"}],"updated_at":"2026-11-02T14:51:03.910277Z"}],"nvd":[{"id":"CVE-2017-13837","description":"An issue was discovered in certain Apple products. macOS before 10.13 is affected. The issue involves the \"Installer\" component. It does not properly restrict an app's entitlements for accessing the FileVault unlock key.","status":"published","published":"2018-04-03T06:29:00.407Z","modified":"2026-06-17T01:05:15.747Z","cvss":[{"version":"3.0","score":7.5,"vector":"CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"high","assessor":"primary"},{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","level":"medium","assessor":"primary"}],"updated_at":"2026-11-02T14:04:17.032862Z"}]}}