CVE-2018-4034

—

CVSS 3.1

5.5 medium

EPSS

<1%p23

Published

Jan 10, 2019 (Jan 10, 2019)

Modified

Jun 17, 2026

Description

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root.

Vendors: macpaw
Products: cleanmymac x
Weakness: CWE-20
Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news1 stories

Vulnerability Spotlight: Multiple privilege escalation vulnerabilities in CleanMyMac X

Cisco TalosJan 2, 18:50 UTC · Jan 2, 2019Vulnerability CVE-2018-4032 CVE-2018-4033 CVE-2018-4034+8 CVEs