CNNVD-202508-076 Information

CNNVD ID

CNNVD-202508-076

Related CVE

CVE-2025-54595

• CNNVD Published: 2025-08-01

Description (Chinese)

Pearcleaner是Alin Lupascu个人开发者的一个mac应用程序清理工具。 Pearcleaner 4.4.0至4.5.1版本存在安全漏洞，该漏洞源于XPC服务暴露执行任意命令方法，可能导致权限提升。

Description (English)

Pearcleaner is a Mac-cleaning tool for Alin Lupascu’s personal developer. There is a security loophole in Pearcleaner, versions 4.4.0 to 4.5.1, which stems from the exposure of XPC services to the method of carrying out arbitrary orders, which may lead to increased authority.

Hazard Level

Medium

Vulnerability Type

其他

Affected Vendor

个人开发者

Published

2025-08-01

Last Modified

2026-02-24

References

https://github.com/alienator88/Pearcleaner/commit/69afadfa95791cb998118ca35c227007b230b984 https://github.com/alienator88/Pearcleaner/security/advisories/GHSA-gr2j-65fh-8pvc https://github.com/alienator88/Pearcleaner/issues/278 https://github.com/alienator88/Pearcleaner/releases/tag/4.5.2 https://access.redhat.com/security/cve/cve-2025-54595

Patch

https://itsalin.com/appInfo/?id=pearcleaner