CVE-2021-41388

Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods defined in XPC service as root, elevating their privilege to the highest level.

• CWE-269

• https://www.netskope.com/company/security-compliance-and-assurance/netskope-security-advisory-nskpsa-2021-002Patch, Vendor Advisory
• https://www.netskope.com/company/security-compliance-and-assurance/netskope-security-advisory-nskpsa-2021-002Patch, Vendor Advisory

Published

Jan 4, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-41380RealVNC Viewer 6.21.406 allows remote VNC servers to cause a…6.5
• CVE-2021-41381Payara Micro Community 5.2021.6 and below allows Directory T…7.5
• CVE-2021-41382Plastic SCM before 10.0.16.5622 mishandles the WebAdmin serv…7.5
• CVE-2021-41383setup.cgi on NETGEAR R6020 1.0.0.48 devices allows an admin …7.2
• CVE-2021-41385The third party intelligence connector in Securonix SNYPR 6.…6.5
• CVE-2021-41387seatd-launch in seatd 0.6.x before 0.6.2 allows privilege es…8.8
• CVE-2021-4139pimcore is vulnerable to Improper Neutralization of Input Du…9
• CVE-2021-41390In Ericsson ECM before 18.0, it was observed that Security P…8
• CVE-2021-41391In Ericsson ECM before 18.0, it was observed that Security M…5.4
• CVE-2021-41392static/main-preload.js in Boost Note through 0.22.0 allows r…9.8
• CVE-2021-41393Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12,…9.8
• CVE-2021-41394Teleport before 4.4.11, 5.x before 5.2.4, 6.x before 6.2.12,…5.3