CVE-2025-5995CWE-732

Canon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation

Medium · published June 26, 2025

CVSS v4.0
4.6
EPSS
0%
Percentile
6.7
In the wild
Unconfirmed
What it is

Canon EOS Webcam Utility Pro for MAC OS version 2.3d

(2.3.29) and earlier contains an improper directory permissions vulnerability.

Exploitation of this vulnerability requires administrator access by a malicious

user. An attacker could modify the directory, potentially resulting in code

execution and ultimately leading to privilege escalation.

The record
Technical detail
CVSS v4.0
4.6 · MEDIUM
Vector
CVSS:4.0/AV:L/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N
EPSS
0.00176 · 6.7th percentile
Weakness
CWE-732 · Incorrect Permission Assignment for Critical Resource
Published
2025-06-26T19:13Z
EPSS history
Timeline
  • 26 JUN 19:13Z
    Canon EOS Webcam Utility Pro for MAC OS contains an insecure permission issue potentially leading to code execution and privilege escalation
    cvelistv5