CVE-2018-4042

An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validation. An attacker with local access could exploit this vulnerability to modify the file system as root...

Privilege escalation

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the running kernel extensions on the system...

CVE-2018-4034

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...

Privilege escalation

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...

CVE-2018-4034

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...

CVE-2018-4035

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...

CVE-2018-4032

An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit...

Privilege escalation

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...

CVE-2018-4032

An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit...

CVE-2018-4035

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...

CVE-2018-4036

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the running kernel extensions on the system...

CVE-2018-4037

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access can use this vulnerability to modify the file system as root...

CVE-2018-4032

An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit...

CVE-2018-4033

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...

CVE-2018-4036

The CVE-2018-4036 item pertains to CleanMyMac X. TALOS describes a privilege-escalation flaw in the removeKextAtPath function of the helper protocol, where a user-supplied argument is not validated, allowing a local attacker to run as root and modify or remove kernel extensions. Talos lists affec...

CVE-2018-4032

The CVE-2018-4032 family targets CleanMyMac X. Affects version 4.04; root privilege escalation arises from input validation flaws in the helper protocol functions (notably moveItemAtPath, moveToTrashItemAtPath, removeItemAtPath, truncateFileAtPath, removeKextAtPath, removeDiagnosticsLogs, and oth...

CVE-2018-4047

CVE-2018-4047 affects CleanMyMac X 4.04. The vulnerability lies in the helper service, specifically the disableLaunchdAgentAtPath function, where user-controlled input is passed to launchtl without validation. This allows a local attacker to run root-level operations and uninstall launchd scripts...

CVE-2018-4035

The CVE-2018-4035 issue affects CleanMyMac X 4.04 and stems from an input validation flaw in the truncateFileAtPath function of the helper protocol. Because the privileged helper runs as root, a local attacker can supply a crafted argument, enabling execution of this function with root privileges...

CVE-2018-4037

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access can use this vulnerability to modify the file system as root...

CVE-2018-4034

The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attacker with local access could use this vulnerability to modify the file system as root...