What’s Vulnerable › Vulnerabilities

CVE-2018-18860

• Severity: high (CVSS 7.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-11-30 · updated 2026-06-17

Description

A local privilege escalation vulnerability has been identified in the SwitchVPN client 2.1012.03 for macOS. Due to over-permissive configuration settings and a SUID binary, an attacker is able to execute arbitrary binaries as root.

Affected products

• Switchvpn: 2.1012.03

References

• http://packetstormsecurity.com/files/150323/SwitchVPN-For-MacOS-2.1012.03-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2018/Nov/38
• https://www.exploit-db.com/exploits/45854/
• http://packetstormsecurity.com/files/150323/SwitchVPN-For-MacOS-2.1012.03-Privilege-Escalation.html
• http://seclists.org/fulldisclosure/2018/Nov/38
• https://www.exploit-db.com/exploits/45854/

Get alerted when CVE-2018-18860 or the next vulnerability affects your stack