{"id":"CVE-2017-2418","aliases":["EUVD-2017-11601","GHSA-w25p-8q9j-g7j4"],"status":"published","title":"An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Hypervisor\" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.","severity":{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-07","score":0.00335,"percentile":0.27066,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2017-04-02T01:36:00Z","modified":"2026-06-17T01:16:09Z","products":[{"vendor":"apple","product":"mac_os_x"}],"references":[{"url":"http://www.securityfocus.com/bid/97140","tags":["vdb-entry","x_refsource_BID","x_transferred","Third Party Advisory","VDB Entry"]},{"url":"https://support.apple.com/HT207615","tags":["x_refsource_CONFIRM","x_transferred","Vendor Advisory"]},{"url":"http://www.securitytracker.com/id/1038138","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2017-2418"},{"url":"https://github.com/advisories/GHSA-w25p-8q9j-g7j4"}],"sources":{"cve":[{"id":"CVE-2017-2418","description":"An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Hypervisor\" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.","status":"published","published":"2017-04-02T01:36:00Z","modified":"2024-08-05T13:55:05.628Z","updated_at":"2026-11-02T14:33:15.543086Z"}],"euvd":[{"id":"EUVD-2017-11601","description":"An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Hypervisor\" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.","status":"published","published":"2017-04-02T01:36:00Z","modified":"2024-08-05T13:55:05Z","updated_at":"2026-11-03T02:39:20.934385Z"}],"ghsa":[{"id":"GHSA-w25p-8q9j-g7j4","title":"An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue...","description":"An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Hypervisor\" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.","status":"published","published":"2022-05-17T02:30:38Z","modified":"2023-01-27T05:04:46Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:42:32.689787Z"}],"nvd":[{"id":"CVE-2017-2418","description":"An issue was discovered in certain Apple products. macOS before 10.12.4 is affected. The issue involves the \"Hypervisor\" component. It allows guest OS users to obtain sensitive information from the CR8 control register via unspecified vectors.","status":"published","published":"2017-04-02T01:59:01.497Z","modified":"2026-06-17T01:16:09.83Z","cvss":[{"version":"3.0","score":6.5,"vector":"CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N","level":"medium","assessor":"primary"},{"version":"2.0","score":2.1,"vector":"AV:L/AC:L/Au:N/C:P/I:N/A:N","level":"low","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:03:44.86906Z"}]}}