CVE-2019-5011

An exploitable privilege escalation vulnerability exists in the helper service CleanMyMac X, version 4.20, due to improper updating. The application failed to remove the vulnerable components upon upgrading to the latest version, leaving the user open to attack. A user with local access can use this vulnerability to modify the file system as root. An attacker would need local access to the machine for a successful exploit.

• CWE-459
• CWE-459

• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0759Third Party Advisory
• https://talosintelligence.com/vulnerability_reports/TALOS-2019-0759Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-5005An issue was discovered in Foxit Reader and PhantomPDF befor…
• CVE-2019-5006An issue was discovered in Foxit Reader and PhantomPDF befor…
• CVE-2019-5007An issue was discovered in Foxit Reader and PhantomPDF befor…
• CVE-2019-5008hw/sparc64/sun4u.c in QEMU 3.1.50 is vulnerable to a NULL po…
• CVE-2019-5009Vtiger CRM 7.1.0 before Hotfix2 allows uploading files with …7.2
• CVE-2019-5010An exploitable denial-of-service vulnerability exists in the…7.5
• CVE-2019-5012An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2019-5013An exploitable privilege escalation vulnerability exists in …7.8
• CVE-2019-5014An exploitable improper access control vulnerability exists …6.5
• CVE-2019-5015A local privilege escalation vulnerability exists in the Mac…7.8
• CVE-2019-5016An exploitable arbitrary memory read vulnerability exists in…9.1
• CVE-2019-5017An exploitable information disclosure vulnerability exists i…5.3