CVE-2013-5148

HighCVSS 7.2/10Last modified Jun 16, 2026

Description

Apple Keynote before 6.0 does not properly handle the interaction between Keynote presentation mode and the Screen Lock implementation, which allows physically proximate attackers to obtain access by visiting an unattended workstation on which this mode was enabled during a sleep operation.

Metrics

CVSS 2.0 7.2/10AV:L/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Oct 24, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-51494.3The Push Notifications subsystem in Apple iOS before 7 provides the push-notification token to an app without user approval, which allows atCVE-2013-51501.9The history-clearing feature in Safari in Apple iOS before 7 does not clear the back/forward history of an open tab, which allows physicallyCVE-2013-51514.3Mobile Safari in Apple iOS before 7 does not prevent HTML interpretation of a document served with a text/plain content type, which allows rCVE-2013-51524.3Mobile Safari in Apple iOS before 7 allows remote attackers to spoof the URL bar via a crafted web site.CVE-2013-51532.1Springboard in Apple iOS before 7 does not properly manage the lock state in Lost Mode, which allows physically proximate attackers to read CVE-2013-51544.3The Sandbox subsystem in Apple iOS before 7 determines the sandboxing requirement for a #! application on the basis of the script interpreteCVE-2013-51557.1The Sandbox subsystem in Apple iOS before 7 allows attackers to cause a denial of service (infinite loop) via an application that writes craCVE-2013-51564.3The Telephony subsystem in Apple iOS before 7 does not require API conformity for access to telephony-daemon interfaces, which allows attackCVE-2013-51575.0The Twitter subsystem in Apple iOS before 7 does not require API conformity for access to Twitter daemon interfaces, which allows attackers CVE-2013-51582.1The Social subsystem in Apple iOS before 7 does not properly restrict access to the cache of Twitter icons, which allows physically proximatCVE-2013-51594.3WebKit in Apple iOS before 7 allows remote attackers to bypass the Same Origin Policy and obtain potentially sensitive information about useCVE-2013-51603.3Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement,
CVE-2013-5148: High severity, CVSS 7.2 | Vulnix