CVE-2017-16945

CVE-2017-16945 affects Arq for Mac (standardrestorer binary in Arq 5.10 and earlier). A local attacker can write to arbitrary files and obtain root privileges via a crafted restore path, as documented in connected sources. Public exploit details reference a local privilege escalation involving a ...

CVE-2017-16928

The CVE refers to Arq (Mac) 5.10 and earlier, where the arq_updater binary enables a local user to write arbitrary files and gain root privileges via a crafted update URL (example: file:///tmp/blah/Arq.zip). The issue is rooted in the arq_updater component on macOS; exploitation requires local ac...