CVE-2018-4054

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.7% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-08 · updated 2026-06-17
Weakness: CWE-20

Description

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to escalate their privileges to root. An attacker would need local access to the machine to successfully exploit this flaw.

Affected products

Talos Pixar Renderman: 22.2.0

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0728
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0728

Get alerted when CVE-2018-4054 or the next vulnerability affects your stack