4.6
CVSSv3

CVE-2017-13786

Published: 13/11/2017 Updated: 03/10/2019
CVSS v2 Base Score: 2.1 | Impact Score: 2.9 | Exploitability Score: 3.9
CVSS v3 Base Score: 4.6 | Impact Score: 3.6 | Exploitability Score: 0.9
VMScore: 187
Vector: AV:L/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

An issue exists in certain Apple products. macOS prior to 10.13.1 is affected. The issue involves the "APFS" component. It does not properly restrict the DMA mapping time of FileVault decryption buffers, which allows malicious users to read cleartext APFS data via a crafted Thunderbolt adapter.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

apple mac os x