CVE-2013-5186

LowCVSS 2.1/10Last modified Jun 16, 2026

Description

Power Management in Apple Mac OS X before 10.9 does not properly handle the interaction between locking and power assertions, which allows physically proximate attackers to obtain sensitive information by reading a screen that should have transitioned into the locked state.

Metrics

CVSS 2.0 2.1/10AV:L/AC:L/Au:N/C:P/I:N/A:N

Weakness enumeration

CWE-264

Affected software

No affected versions have been published.

Timeline

Published
Oct 24, 2013
Last modified
Jun 16, 2026
NVD status
Modified

Related CVEs from 2013

CVE-2013-51871.9The Screen Lock implementation in Apple Mac OS X before 10.9 does not immediately accept Keychain Status menu Lock Screen commands, and instCVE-2013-51884.0The Screen Lock implementation in Apple Mac OS X before 10.9, when hibernation and autologin are enabled, does not require a password for a CVE-2013-51895.8Apple Mac OS X before 10.9 does not preserve a certain administrative system-preferences setting across software updates, which allows conteCVE-2013-51904.3Smart Card Services in Apple Mac OS X before 10.9 does not properly implement certificate-revocation checks, which allows remote attackers tCVE-2013-51912.1The syslog implementation in Apple Mac OS X before 10.9 allows local users to obtain sensitive information by leveraging access to the GuestCVE-2013-51924.9The USB hub controller in Apple Mac OS X before 10.9 allows local users to cause a denial of service (system crash) via a request with a craCVE-2013-51934.7The App Store component in Apple iOS before 7.0.4 does not properly enforce an intended transaction-time password requirement, which allows CVE-2013-51956.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of seCVE-2013-51966.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of seCVE-2013-51976.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of seCVE-2013-51986.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of seCVE-2013-51996.8WebKit, as used in Apple Safari before 6.1.1 and 7.x before 7.0.1, allows remote attackers to execute arbitrary code or cause a denial of se