CVE-2018-10171

Severity: critical (CVSS 9.8 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2019-06-05 · updated 2026-06-17
Weakness: CWE-732

Description

Kromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper` component. The AdwareAnalzyerPrivilegedHelper tool implements an XPC service that allows an unprivileged application to connect and execute shell scripts as the root user.

Affected products

Kromtech Mackeeper: 3.20.4

References

https://versprite.com/advisories/mackeeper/
https://versprite.com/advisories/mackeeper/

Get alerted when CVE-2018-10171 or the next vulnerability affects your stack