CVE-2017-13908: Apple Mac OS X

High severity, CVSS 7.8. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue in handling file permissions was addressed with improved validation. This issue is fixed in macOS High Sierra 10.13.1, Security Update 2017-001 Sierra, and Security Update 2017-004 El Capitan, macOS High Sierra 10.13. A local attacker may be able to execute non-executable text files via an SMB share.

Affected products

• Apple Mac OS X: from 10.11, before 10.11.6 (fixed in 10.11.6); from 10.12, up to and including 10.12.5; version 10.11.6 only

Published 2021-12-23. Last modified 2026-06-17.