CVE-2018-4036

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with local access could use this vulnerability to modify the running kernel extensions on the system.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-20

Affected software

No affected versions have been published.

Timeline

Published
Jan 10, 2019
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-40375.5The CleanMyMac X software contains an exploitable privilege escalation vulnerability due to improper input validation. An attacker with locaCVE-2018-40387.8An exploitable arbitrary write vulnerability exists in the open document format parser of the Atlantis Word Processor, version 3.2.7.2, whilCVE-2018-40397.8An exploitable out-of-bounds write vulnerability exists in the PNG implementation of Atlantis Word Processor, version 3.2.7.2. This can alloCVE-2018-40407.8An exploitable uninitialized pointer vulnerability exists in the rich text format parser of Atlantis Word Processor, version 3.2.7.2. A specCVE-2018-40415.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaCVE-2018-40425.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaCVE-2018-40435.5An exploitable privilege escalation vulnerability exists in the Clean My Mac X, version 4.04, helper service due to improper input validatioCVE-2018-40445.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaCVE-2018-40455.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaCVE-2018-40465.5An exploitable denial-of-service vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validatioCVE-2018-40475.5An exploitable privilege escalation vulnerability exists in the helper service of Clean My Mac X, version 4.04, due to improper input validaCVE-2018-40487.8An exploitable local privilege elevation vulnerability exists in the file system permissions of the `Temp` directory in GOG Galaxy 1.2.48.36
CVE-2018-4036: Medium severity, CVSS 5.5 | Vulnix