Description
iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Bjango | iStats | 7.10.4 | — |
References
- https://fluidattacks.com/advisories/muse third-party-advisory
- https://bjango.com/mac/istatmenus/ product
- https://cdn.istatmenus.app/files/istatmenus7/versions/iStatMenus7.10.6.zip patch