Log Reporter
Approved changes feed: RSS · Atom
cpe:2.3:a:intego:log_reporter:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Intego (7aa8aa7a-b8a1-516f-81a4-6cce9d2b9d1e) |
|---|---|
| Product | Log Reporter (84c6362f-76b5-5a7c-bea3-387c94b262b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-26224 |
vulnerable | 2026-06-08 07:53:21.431749 |
Intego Log Reporter TOCTOU Local Privilege Escalation
Intego Log Reporter, a macOS diagnostic utility bundled with Intego security products that collects system and application logs for support analysis, contains a local privilege escalation vulnerability. A root-executed diagnostic script creates and writes files in /tmp without enforcing secure directory handling, introducing a time-of-check to time-of-use (TOCTOU) race condition. A local unprivileged user can exploit a symlink-based race condition to cause arbitrary file writes to privileged system locations, resulting in privilege escalation to root.
Published: 2026-02-12T21:58:19.803Z
Updated: 2026-05-14T02:09:41.848Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.