7.2
CVSSv2

CVE-2018-16962

Published: 12/09/2018 Updated: 08/09/2021
CVSS v2 Base Score: 7.2 | Impact Score: 10 | Exploitability Score: 3.9
CVSS v3 Base Score: 7.8 | Impact Score: 5.9 | Exploitability Score: 1.8
VMScore: 641
Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

Webroot SecureAnywhere prior to 9.0.8.34 on macOS mishandles access to the driver by a process that lacks root privileges.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

webroot secureanywhere

Recent Articles

Kernel sanders: Webroot vuln creates route to root Macs
The Register • John Leyden • 14 Sep 2018

Patched flaw hard to exploit, but serious once you get there, warn infoseccers Webroot antivirus goes bananas, starts trashing Windows system files

Details of a locally exploitable but kernel-level flaw in Webroot's SecureAnywhere macOS security software were revealed yesterday, months after the bug was patched. The fact that the memory corruption bug (CVE-2018-16962) is locally exploitable limited its utility to black hats. If it was the only tool in their kit, it would be of little use to your average bad guy. The hacker would have to be either already logged into a vulnerable Mac themselves or have passed the point where they had already...