CVE-2017-16895

—

CVSS 3.1

7.8 high

EPSS

1%p61

Published

Dec 1, 2017 (Dec 1, 2017)

Modified

Jun 17, 2026

Description

The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.

Vendors: arqbackup
Products: arq
Weakness: CWE-732
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.0%)

In the news0 stories

No ingested article mentions this CVE yet.