Skip to content
CVE PROGRAM SOURCE RECORD8.5 High

CVE-2025-11921

iStat Menus 7.10.4 - Local Privilege Escalation

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
Fluid Attacks

Description

iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bjango iStats

Default version status: unaffected

  • 7.10.4affected

References