GCVE - cpe:2.3:a:liquidvpn:liquidvpn:*:*:*:*:*:macos:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:liquidvpn:liquidvpn:*:*:*:*:*:macos:*:*

part: a version: * update: *

Vendor	Liquidvpn (`c0890d74-7e36-5ffa-9f4b-376a5803d1b3`)
Product	Liquidvpn (`d9d671bf-11d9-5e14-ae6d-080d204c24e3`)
Edition	*
Language	*
Software edition	*
Target software	macos
Target hardware	*
Other	*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-18859`	vulnerable	2026-06-08 05:11:14.828617	Details available Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the value of the "tun_path" or "tap_path" pathname in a kextload() call. Published: 2018-11-20T19:00:00.000Z Updated: 2024-08-05T11:23:08.440Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/150137/LiquidVPN-For-macOS-1.3.7-Privilege-Escalation.html https://www.exploit-db.com/exploits/45782/ http://seclists.org/fulldisclosure/2018/Nov/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18858`	vulnerable	2026-06-08 05:11:14.828289	Details available Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "tun_path" or "tap_path" pathname within a shell command. Published: 2018-11-20T19:00:00.000Z Updated: 2024-08-05T11:23:08.217Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/150137/LiquidVPN-For-macOS-1.3.7-Privilege-Escalation.html https://www.exploit-db.com/exploits/45782/ http://seclists.org/fulldisclosure/2018/Nov/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18857`	vulnerable	2026-06-08 05:11:14.827934	Details available Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "command_line" parameter as a shell command. Published: 2018-11-20T19:00:00.000Z Updated: 2024-08-05T11:23:08.183Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/150137/LiquidVPN-For-macOS-1.3.7-Privilege-Escalation.html https://www.exploit-db.com/exploits/45782/ http://seclists.org/fulldisclosure/2018/Nov/1	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18856`	vulnerable	2026-06-08 05:11:14.827402	Details available Multiple local privilege escalation vulnerabilities have been identified in the LiquidVPN client through 1.37 for macOS. An attacker can communicate with an unprotected XPC service and directly execute arbitrary OS commands as root or load a potentially malicious kernel extension because com.smr.liquidvpn.OVPNHelper uses the system function to execute the "openvpncmd" parameter as a shell command. Published: 2018-11-20T19:00:00.000Z Updated: 2024-08-05T11:23:08.431Z Open on db.gcve.eu Reference links http://packetstormsecurity.com/files/150137/LiquidVPN-For-macOS-1.3.7-Privilege-Escalation.html https://www.exploit-db.com/exploits/45782/ http://seclists.org/fulldisclosure/2018/Nov/1	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Liquidvpn

Notes

PURL mappings

Vulnerability references

Contribute