CVE-2017-16928
23Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 1.0%
from disclosure to weapon0 days
Published on NVDJan 31
1st PoCJan 29
exploitation probability
1.0%top 41% of all CVEs
observed exploitation
nono source reports it
3 public exploit(s)
The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.
Affected products
n/a · n/apublic PoCs found — 3
cve_referencepacketstormsecurity.com/files/146158/Arq-5.10-Local-Privilege-Escalation.htmlunverifiedcve_referencewww.exploit-db.com/exploits/43925/unverifiedexploitdbwww.exploit-db.com/exploits/43925unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.