CVE-2020-25736

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...

CVE-2020-25736

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...

CVE-2020-15495

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...

Privilege escalation

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...

Privilege escalation

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...

CVE-2020-15495

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...

CVE-2020-25736: Undefined Security Weakness

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...

PT-2021-11174 · Acronis · Acronis True Image

Name of the Vulnerable Software and Affected Versions: Acronis True Image versions 2019 update 1 through 2021 update 1 Description: The issue allows local privilege escalation due to an insecure XPC service configuration. Recommendations: For Acronis True Image versions 2019 update 1 through 2021...

PT-2021-9797

Name of the Vulnerable Software and Affected Versions Acronis True Image versions 2019 update 1 through 2020 Description The issue allows local privilege escalation due to an insecure XPC service configuration. Recommendations For Acronis True Image versions 2019 update 1 through 2020, update to ...

CVE-2020-25736

Acronis True Image 2019 update 1 through 2021 update 1 on macOS allows local privilege escalation due to an insecure XPC service configuration...

CVE-2020-15495: Undefined Security Weakness

Acronis True Image 2019 update 1 through 2020 on macOS allows local privilege escalation due to an insecure XPC service configuration...

Local privilege escalation due to insecure XPC service configuration

...

Local privilege escalation due to insecure XPC service configuration

...

PT-2021-18829 · Apple · Ipados +4

Name of the Vulnerable Software and Affected Versions: macOS versions prior to 11.4 iOS versions prior to 14.6 iPadOS versions prior to 14.6 tvOS versions prior to 14.6 watchOS versions prior to 7.5 Description: A local attacker may be able to elevate their privileges due to an issue in the...

PT-2021-2527

Name of the Vulnerable Software and Affected Versions: KIS for macOS affected versions not specified Description: The issue is related to an error in the authorization procedure of the XPC service of Kaspersky Internet Security for macOS, which could potentially allow an attacker to disable...

CVE-2020-25533

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...

Race condition

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...

CVE-2020-25533

CVE-2020-25533 describes a local privilege issue in Malwarebytes for macOS prior to 4.0. A malicious application could exercise a privileged action within the Malwarebytes launch daemon because the service incorrectly validated XPC connections by relying on the process ID (PID) instead of the aud...

CVE-2020-25533: Concurrent Execution using Shared Resource with Improper Synchronization

An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can constru...

PT-2021-11146

Name of the Vulnerable Software and Affected Versions: Malwarebytes versions prior to 4.0 Description: An issue was discovered in Malwarebytes where a malicious application could perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC...