Skip to content
OpenAdvisories

Product · exelban

stats

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 8.7
    CVE-2025-21606

    Local Privilege Escalation via Exposed XPC Method Due to Client Verification Failure in stats

    stats is a macOS system monitor in for the menu bar. The Stats application is vulnerable to a local privilege escalation due to the insecure implementation of its XPC service. The application registers a Mach service under the name `eu.exelban.Stats.SMC.Helpe…

    exelban stats
  • High 7.8
    CVE-2025-0396

    exelban stats XPC Service shouldAcceptNewConnection command injection

    A vulnerability, which was classified as critical, has been found in exelban stats up to 2.11.21. This issue affects the function shouldAcceptNewConnection of the component XPC Service. The manipulation leads to command injection. It is possible to launch the…

    exelban stats