CVE-2017-13786 is a medium-severity vulnerability affecting macOS versions prior to 10.13.1, specifically within the APFS component. It allows an attacker with physical access to read cleartext APFS data by using a crafted Thunderbolt adapter to exploit improper restrictions on DMA mapping time for FileVault decryption buffers. The CVSS score is 4.6, indicating a high impact on confidentiality but requiring physical presence. There is no known active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 10.13.0CPE matchmatch criteria | cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:P/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.