CVE-2017-13911

Severity: high (CVSS 7.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-04-03 · updated 2026-06-17
Weakness: CWE-20

Description

A configuration issue was addressed with additional restrictions. This issue affected versions prior to macOS X El Capitan 10.11.6 Security Update 2018-002, macOS Sierra 10.12.6 Security Update 2018-002, macOS High Sierra 10.13.2.

Affected products

macOS: before 10.11.6; from 10.12 before 10.12.6; from 10.13 before 10.13.2 — fixed in 10.11.6, 10.12.6, 10.13.2

How to fix

Upgrade to a fixed version: macOS 10.11.6, 10.12.6, 10.13.2. Check the vendor advisory for mitigations.

References

https://support.apple.com/kb/HT208331
https://support.apple.com/kb/HT208692
https://support.apple.com/kb/HT208331
https://support.apple.com/kb/HT208692

Get alerted when CVE-2017-13911 or the next vulnerability affects your stack