CVE-2016-5087

MEDIUM 4.4CVE-2016-5087 · Published 26/06/2016 · updated 17/06/2026

In short

CVE-2016-5087 is a MEDIUM (CVSS 4.4) vulnerability affecting alertus desktop notification for os x (alertus).
Chance of exploitation in the next 30 days (EPSS): 0.62%, higher than 49.9% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
alertus desktop notification for os x alertus	`≤ 2.9.30.1700`	No fix yet

Description

Alertus Desktop Notification before 2.9.31.1710 on OS X uses weak permissions for configuration files and unspecified other files, which allows local users to suppress emergency notifications or change content via standard filesystem operations.

References

kb.cert.org/vuls/id/302544 · Third Party Advisory
kb.cert.org/vuls/id/BLUU-A9TJHR · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free