CVE-2024-12786

CVSS V2 None CVSS V3 None
Description
A vulnerability, which was classified as critical, was found in X1a0He Adobe Downloader up to 1.3.1 on macOS. Affected is the function shouldAcceptNewConnection of the file com.x1a0he.macOS.Adobe-Downloader.helper of the component XPC Service. The manipulation leads to improper privilege management. An attack has to be approached locally. The exploit has been disclosed to the public and may be used. This product is not affiliated with the company Adobe.
Overview
  • CVE ID
  • CVE-2024-12786
  • Assigner
  • VulDB
  • Vulnerability Status
  • PUBLISHED
  • Published Version
  • 2024-12-19T15:00:22.547Z
  • Last Modified Date
  • 2024-12-19T15:00:22.547Z
Weakness Enumerations
CWE URL
CWE-269 http://cwe.mitre.org/data/definitions/269.html
CWE-266 http://cwe.mitre.org/data/definitions/266.html
References
Reference URL Reference Tags
https://vuldb.com/?id.288966 vdb-entry technical-description
https://vuldb.com/?ctiid.288966 signature permissions-required
https://vuldb.com/?submit.464685 third-party-advisory
https://winslow1984.com/books/cve-collection/page/adobe-downloader-131-local-privilege-escalation exploit
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2024-12786
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-12786
History
Created Old Value New Value Data Type Notes
2024-12-20 13:18:14 Added to TrackCVE