CVE Catalog
CVE-2021-36665
HighCVSS 7.8Exploitation Probability (EPSS)
Low risk0.50%
39th percentile - higher than 39% of all known CVEs
Summary
An issue was discovered in Druva 6.9.0 for macOS, where the inSyncUpgradeDaemon component allows attackers to gain escalated local privileges.
Risk Assessment
An attacker with local access can escalate privileges, potentially leading to unauthorized access to sensitive data or full system compromise.
Recommendation
It is recommended to immediately update Druva software to the latest available version that addresses this vulnerability.
Other vulnerabilities in Druva
Original NVD description (English source)
An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgradeDaemon.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS