What’s Vulnerable › Vulnerabilities

CVE-2018-16962

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-09-12 · updated 2026-06-17
• Weakness: CWE-123

Description

Webroot SecureAnywhere before 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.

Affected products

• Webroot Secure Anywhere: before 9.0.8.34 — fixed in 9.0.8.34

How to fix

Upgrade to a fixed version: Webroot Secure Anywhere 9.0.8.34. Check the vendor advisory for mitigations.

References

• http://answers.webroot.com/Webroot/ukp.aspx?pid=10&app=vw&vw=1&login=1&json=1&solutionid=2022
• https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2018-009/?fid=11720
• https://www.trustwave.com/Resources/SpiderLabs-Blog/CVE-2018-16962--Webroot-SecureAnywhere-macOS-Kernel-Level-Memory-Corruption/
• http://answers.webroot.com/Webroot/ukp.aspx?pid=10&app=vw&vw=1&login=1&json=1&solutionid=2022

Get alerted when CVE-2018-16962 or the next vulnerability affects your stack