7 matches found
CVE-2026-4556
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
EUVD-2026-88311
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
CVE-2026-4556 macOS Exam4 Local Privilege Escalation via Command Injection
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
CVE-2026-4556
The Exam4 application on macOS is vulnerable to a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper. The issue stems from the [ConsoleLogHelper copyConsoleIntoFileFromStartDate:] method, which fails to properly sanitize attacker-controlled parameters used in ...
CVE-2026-4556 macOS Exam4 Local Privilege Escalation via Command Injection
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
CVE-2026-4556: Improper Neutralization of Special Elements used in an OS Command
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...
PT-2026-99909
Exam4 is affected by a local privilege escalation vulnerability in the com.extegrity.LogTool privileged helper, which communicates with the application via XPC. The ConsoleLogHelper copyConsoleIntoFileFromStartDate: method executes a syslog command using attacker-controlled parameters without...