CVE-2026-0924: Drbuho Buhocleaner

High severity, CVSS 7.0. EPSS: 0.2% chance of exploitation in the next 30 days.

BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2.

Affected products

• Drbuho Buhocleaner: version 1.15.2 only

Published 2026-02-02. Last modified 2026-06-17.