CVE-2018-10171: Kromtech Mackeeper

Critical severity, CVSS 9.8. EPSS: 1.8% chance of exploitation in the next 30 days.

Kromtech MacKeeper 3.20.4 suffers from a root privilege escalation vulnerability through its `com.mackeeper.AdwareAnalyzer.AdwareAnalyzerPrivilegedHelper` component. The AdwareAnalzyerPrivilegedHelper tool implements an XPC service that allows an unprivileged application to connect and execute shell scripts as the root user.

Affected products

• Kromtech Mackeeper: version 3.20.4 only

Published 2019-06-05. Last modified 2026-06-17.