How severe is CVE-2018-6336?

This vulnerability has a severity rating of HIGH with a CVSS score of 7.8 out of 10.

What type of vulnerability is CVE-2018-6336?

This is classified as CWE-254, which is a common weakness in software security.

CVE-2018-6336 - HIGH Severity | CVSS 7.8

Vulnerability Description

An issue was discovered in osquery. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute. This issue affects osquery prior to v3.2.7

Related Vulnerabilities

CVE-2014-9793

HIGH

CVSS:7.8(High)

platform/msm_shared/mmc.c in the Qualcomm components in Android before 2016-07-05 on Nexus 7 (2013) devices mishandles the power-on write-protect feature, which allows attackers to gain privileges via...

CWE-2542014

CVE-2016-10717

HIGH

CVSS:7.8(High)

A vulnerability in the encryption and permission implementation of Malwarebytes Anti-Malware consumer version 2.2.1 and prior (fixed in 3.0.4) allows an attacker to take control of the whitelisting fe...

CWE-2542016

CVE-2016-1520

HIGH

CVSS:7.8(High)

The Grandstream Wave app 1.0.1.26 and earlier for Android does not use HTTPS when retrieving update information, which might allow man-in-the-middle attackers to execute arbitrary code via a crafted a...

CWE-2542016

CVE-2016-1738

HIGH

CVSS:7.8(High)

dyld in Apple OS X before 10.11.4 allows attackers to bypass a code-signing protection mechanism via a modified app.

CWE-2542016

CVE-2016-3672

HIGH

CVSS:7.8(High)

The arch_pick_mmap_layout function in arch/x86/mm/mmap.c in the Linux kernel through 4.5.2 does not properly randomize the legacy base address, which makes it easier for local users to defeat the inte...

CWE-2542016

CVE-2016-5247

HIGH

CVSS:7.8(High)

The BIOS for Lenovo ThinkCentre E93, M6500t/s, M6600, M6600q, M6600t/s, M73p, M800, M83, M8500t/s, M8600t/s, M900, M93, and M93P devices; ThinkServer RQ940, RS140, TS140, TS240, TS440, and TS540 devic...

CWE-2542016