CVE-2024-55504

An issue in RAR Extractor - Unarchiver Free and Pro v.6.4.0 allows local attackers to inject arbitrary code potentially leading to remote control and unauthorized access to sensitive user data via the exploit_combined.dylib component on MacOS.

CVSS v3.1

5.5 MEDIUMCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

EPSS

0.56% chance of exploitation in the next 30 days, 44th percentile

Published

2025-01-21

Updated

2025-02-04

Proof-of-concept exploits (1)

• SyFi/CVE-2024-555040★ · 2025-01-19

References

• CVE Record
• NVD entry

Related

• CVE-2017-0199
• CVE-2018-15982
• CVE-2018-4878
• CVE-2018-8172
• CVE-2018-8174
• CVE-2023-46818