| Reporter | Title | Published | Views | Family All 15 |
|---|---|---|---|---|
 | Xamarin Studio for Mac 6.2.1 (build 3)/6.3 (build 863) - Privilege Escalation Vulnerability | 15 Aug 201700:00 | – | zdt |
 | CVE-2017-8665 | 14 Aug 201700:00 | – | circl |
 | Microsoft Xamarin.iOS Elevation of Privilege Vulnerability | 15 Aug 201700:00 | – | cnvd |
 | CVE-2017-8665 | 15 Aug 201718:00 | – | cvelist |
 | Xamarin Studio for Mac 6.2.1 (build 3) / 6.3 (build 863) - Local Privilege Escalation | 14 Aug 201700:00 | – | exploitdb |
 | Security update 2017-08-14 | 14 Aug 201707:00 | – | mskb |
 | KLA11123 PE vulnerability in Xamarin.iOS | 14 Aug 201700:00 | – | kaspersky |
 | Xamarin.iOS Elevation Of Privilege Vulnerability | 14 Aug 201707:00 | – | mscve |
 | CVE-2017-8665 | 15 Aug 201718:29 | – | nvd |
 | Xamarin Studio Privilege Escalation Vulnerability - Mac OS X | 17 Aug 201700:00 | – | openvas |
10
Node
AND
[
{
"product": "Xamarin.iOS",
"vendor": "Microsoft Corporation",
"versions": [
{
"status": "affected",
"version": "Xamarin.iOS"
}
]
}
]| Source | Link |
|---|---|
| exploit-db | www.exploit-db.com/exploits/42454/ |
| portal | www.portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2017-8665 |
| securityfocus | www.securityfocus.com/bid/100308 |
| Parameter | Position | Path | Description | CWE |
|---|---|---|---|---|
| /private/etc/sudoers | path | /private/etc/sudoers | Local privilege escalation via modification of sudoers by a root-run updater. | CWE-732 |
| /private/tmp/sudoers | path | /private/tmp/sudoers | Temporary file used in PoC to store sudoers policy for manipulation by curlrc. | CWE-732 |
| /Users/USER/.curlrc | path | /Users/USER/.curlrc | Curl configuration file controlled by local attacker enabling write of sudoers via root curl. | CWE-732 |
| /etc/sudoers.d | path | /etc/sudoers.d | Directory used for sudoers policy; PoC mentions mounting DMG here to inject sudoers entries. | CWE-732 |
| /Library/Frameworks/Xamarin.iOS.framework/Versions/10.8.0.175/share/doc/MonoTouch/apple-doc-wizard | path | /Library/Frameworks/Xamarin.iOS.framework/Versions/10.8.0.175/share/doc/MonoTouch/apple-doc-wizard | The updater binary used by the privileged update mechanism that PoC exploits to escalate privileges. | CWE-732 |
| /tmp/ios-docs-download.$$ | path | /tmp/ios-docs-download.$$ | Insecure work directory created for downloads that can be manipulated by an attacker. | CWE-732 |
| /tmp/ios-docs-download.* | path | /tmp/ios-docs-download.* | Pattern for attacker-controlled temp directories used during the update. | CWE-732 |
Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
17 Jun 2026 01:26Current
7.5High risk
Vulners AI Score7.5
CVSS 27.2
CVSS 37.8
EPSS0.04345