CVE-2018-4032

An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs

High · published January 10, 2019

CVSS v3.0
7.1
EPSS
0%
Percentile
22.0
In the wild
Unconfirmed
What it is

An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit.

The record
Technical detail
CVSS v3.0
7.1 · HIGH
Vector
CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00306 · 22.0th percentile
Published
2019-01-10T15:00Z
EPSS history
Timeline
  • 10 JAN 15:00Z
    An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs
    cvelistv5