CVE-2018-4055

Severity: medium (CVSS 5.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-03-08 · updated 2026-06-17
Weakness: CWE-20

Description

A local privilege escalation vulnerability exists in the install helper tool of the Mac OS X version of Pixar Renderman, version 22.2.0. A user with local access can use this vulnerability to read any root file from the file system. An attacker would need local access to the machine to successfully exploit this flaw.

Affected products

Talos Pixar Renderman: 22.2.0

References

https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729
https://talosintelligence.com/vulnerability_reports/TALOS-2018-0729

Get alerted when CVE-2018-4055 or the next vulnerability affects your stack