35
CVE-2018-4041
—CVSS 3.1
5.5 medium
EPSS
<1%p23
Published
()
Modified
Description
An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root.
- Vendors
- macpaw
- Products
- cleanmymac x
- Weakness
- CWE-20
- Vector
- CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N