CVE-2017-13801
Description
The Dictionary Widget in macOS before 10.13.1 allows local file disclosure via pasted text in search.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
The Dictionary Widget in macOS before 10.13.1 allows local file disclosure via pasted text in search.
Vulnerability
The Dictionary Widget component in macOS before 10.13.1 allows local file disclosure when a user pastes text into the search field. The issue stems from improper handling of pasted content, which can be crafted to reference local files.
Exploitation
An attacker must convince a user to paste specially crafted text into the Dictionary Widget search field. No authentication or network access is required; the attack relies on user interaction.
Impact
Successful exploitation enables an attacker to read local files accessible to the user, leading to information disclosure.
Mitigation
Apple addressed the issue in macOS 10.13.1. Users should update via Software Update. No other workarounds have been disclosed.
AI Insight generated on May 22, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.
Affected products
2- Range: <10.13.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- www.securitytracker.com/id/1039710nvdThird Party AdvisoryVDB Entry
- support.apple.com/HT208221nvdVendor Advisory
News mentions
0No linked articles in our index yet.