CVE-2019-12174

ALTO 7.8CVE-2019-12174 · Published 08/07/2019 · updated 17/06/2026

In breve

CVE-2019-12174 è una vulnerabilità ALTO (CVSS 7.8) che riguarda hide.me (hide).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.43%, superiore al 37.2% delle vulnerabilità.
Correzione: aggiornare a 2.4.4 o successiva.

Package	Affected versions	Patched versions
hide.me hide	`< 2.4.4`	`2.4.4`

Description

hide.me before 2.4.4 on macOS suffers from a privilege escalation vulnerability in the connectWithExecutablePath:configFilePath:configFileName method of the me_hide_vpnhelper.Helper class in the me.hide.vpnhelper macOS privilege helper tool. This method takes user-supplied input and can be used to escalate privileges, as well as obtain the ability to run any application on the system in the root context.

References

drive.google.com/open · Exploit

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free