What’s Vulnerable › Vulnerabilities

CVE-2017-13892

• Severity: high (CVSS 7.5 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2021-12-23 · updated 2026-06-17

Description

An issue existed in the handling of Contact sharing. This issue was addressed with improved handling of user information. This issue is fixed in macOS High Sierra 10.13.2, Security Update 2017-002 Sierra, and Security Update 2017-005 El Capitan. Sharing contact information may lead to unexpected data sharing.

Affected products

• macOS: from 10.11 before 10.11.6; from 10.12 before 10.12.6; 10.11.6, 10.11.6-security_update_2016-001, 10.11.6-security_update_2016-002, 10.11.6-security_update_2016-003, 10.11.6-security_update_2017-001, 10.11.6-security_update_2017-002 (+4) — fixed in 10.11.6, 10.12.6
• Apple macOS: before 10.13.2 — fixed in 10.13.2

How to fix

Upgrade to a fixed version: macOS 10.11.6, 10.12.6; Apple macOS 10.13.2. Check the vendor advisory for mitigations.

References

• https://support.apple.com/en-us/HT208331
• https://support.apple.com/en-us/HT208331

Get alerted when CVE-2017-13892 or the next vulnerability affects your stack