CVE-2017-13909: Apple Mac OS X

Medium severity, CVSS 5.5. EPSS: 0.2% chance of exploitation in the next 30 days.

An issue existed in the storage of sensitive tokens. This issue was addressed by placing the tokens in Keychain. This issue is fixed in macOS High Sierra 10.13. A local attacker may gain access to iCloud authentication tokens.

Affected products

• Apple Mac OS X: from 10.0, before 10.13 (fixed in 10.13)

Published 2021-12-23. Last modified 2026-06-17.