CVE-2017-13907: Apple Mac OS X

Medium severity, CVSS 6.8. EPSS: 0.2% chance of exploitation in the next 30 days.

A state management issue was addressed with improved state validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan. The screen lock may unexpectedly remain unlocked.

Affected products

• Apple Mac OS X: from 10.11, before 10.11.6 (fixed in 10.11.6); from 10.12, up to and including 10.12.5; version 10.11.6 only

Published 2021-12-23. Last modified 2026-06-17.