CVE-2018-10171

—

CVSS 3.0

9.8 critical

EPSS

2%p77

Published

Jun 5, 2019 (Jun 5, 2019)

Modified

Jun 17, 2026

Description

Kromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper` component. The AdwareAnalzyerPrivilegedHelper tool implements an XPC service that allows an unprivileged application to connect and execute shell scripts as the root user.

Vendors: kromtech
Products: mackeeper
Weakness: CWE-732
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news0 stories

No ingested article mentions this CVE yet.