CVE-2018-8739

2022-10-0316:21:54

mitre

www.cve.org

cve-2018-8739

vpn unlimited

macos

privilege escalation

xpc interface

root privilege

9.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.4%

JSON

VPN Unlimited 4.2.0 for macOS suffers from a root privilege escalation vulnerability in its privileged helper tool. The privileged helper tool implements an XPC interface, which allows arbitrary applications to execute system commands as root.

References

github.com/VerSprite/research/blob/master/advisories/VS-2018-014.md