VULNERABILITY INTELLIGENCE

CVE-2024-31952

CVSS score6.7 MEDIUM
EPSS probability0.17%
CISA KEVNot currently listed
Published2024-05-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

An issue was discovered in Samsung Magician 8.0.0 on macOS. Because symlinks are used during the installation process, an attacker can escalate privileges via arbitrary file permission writes. (The attacker must already have user privileges, and an administrator password must be entered during the program installation stage for privilege escalation.)

Weakness classification

  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-59

Primary references