CVE-2026-0924

7.3 highEPSS 0.2%

High (7.3) in drbuho buhocleaner. EPSS 0.2% chance of exploitation in the next 30 days.

BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2.

Severity

CVSS 4.0

7.3 high

CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

CVSS 3.1

7.0 high

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 7% of CVEs (scores of 2026-10-31)
CWE: CWE-367
Published: 2026-02-02
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

drbuho:buhocleaner

References

https://fluidattacks.com/advisories/solstafir
https://www.drbuho.com/buhocleaner
https://www.drbuho.com/buhocleaner/download

Check your stack JSON