VULNERABILITY INTELLIGENCE
CVE-2025-11921
EPSS probability0.60%
CISA KEVNot currently listed
Published2025-11-24
Last modified2026-10-18
Description
iStats contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via command injection.This issue affects iStats: 7.10.4.
Weakness classification
- help@fluidattacks.com: CWE-77