Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
Fluid Attacks' research team found a zero-day vulnerability in BuhoCleaner. As a #CNA, we assigned the ID CVE-2026-0924. Details here: 🔗https://fluidattacks.com/pt/advisories/solstafir. We have disclosed 226 #CVE to this date: 🔗https://fluidattacks.com/advisories/. https://t.co/0hKxSUGXiV
Post summary
Fluid Attacks identified a zero-day vulnerability (CVE-2026-0924) in BuhoCleaner and published an advisory with details.
CVE-2026-0924 Local Privilege Escalation in BuhoCleaner 1.15.2 via Insecure XPC Service https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-0924
Post summary
A local privilege escalation vulnerability (CVE‑2026‑0924) was disclosed for BuhoCleaner 1.15.2 due to an insecure XPC service, with no public PoC, exploit code, or patch mentioned yet.
CVE-2026-0924 BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCl… https://www.cve.org/CVERecord?id=CVE-2026-0924
Post summary
The post provides a brief disclosure of a local privilege escalation flaw in BuhoCleaner, citing the CVE ID and a link to the official record, with no evidence of exploitation or mitigation steps.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | drbuho | buhocleaner | 1.15.2 | macos | - |