CVE-2018-4032

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

An exploitable privilege escalation vulnerability exists in the way the CleanMyMac X software improperly validates inputs. An attacker with local access could use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-40335.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with locaCVE-2018-40345.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attackCVE-2018-40355.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability that exists due to improper input validation. An attackCVE-2018-40365.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with locaCVE-2018-40375.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with locaCVE-2018-40387.8An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whilCVE-2018-40397.8An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can alloCVE-2018-40407.8An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specCVE-2018-40415.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaCVE-2018-40425.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaCVE-2018-40435.5An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to improper input validatioCVE-2018-40445.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input valida
CVE-2018-4032: Medium severity, CVSS 5.5 | Vulnix