Wacom Driver 6.3.32-3

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:wacom:driver:6.3.32-3:*:*:*:*:*:*:*

part: a version: 6.3.32-3 update: *

VendorWacom (d995461d-1835-5e10-97f5-9daf07c915f3)
ProductDriver (2fd2d4dd-440d-5ae8-8b34-df4a686279da)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-5013 vulnerable 2026-06-08 05:13:57.535526 Details available
HIGH (7.1)
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the start/stopLaunchDProcess command. The command takes a user-supplied string argument and executes launchctl under root context. A user with local access can use this vulnerability to raise load arbitrary launchD agents. An attacker would need local access to the machine for a successful exploit.
Published: 2019-10-24T15:17:14.000Z
Updated: 2024-08-04T19:40:49.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-5012 vulnerable 2026-06-08 05:13:57.534859 Details available
HIGH (7.8)
An exploitable privilege escalation vulnerability exists in the Wacom, driver version 6.3.32-3, update helper service in the startProcess command. The command takes a user-supplied script argument and executes it under root context. A user with local access can use this vulnerability to raise their privileges to root. An attacker would need local access to the machine for a successful exploit.
Published: 2019-10-24T15:17:27.000Z
Updated: 2024-08-04T19:40:49.091Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.