CVE-2021-36665

HIGH

Druva Insync Client < 7.0.0 - Insecure Deserialization

Title source: rule

Description

An issue was discovered in Druva 6.9.0 for macOS, allows attackers to gain escalated local privileges via the inSyncUpgradeDaemon.

References (3)

Scores

CVSS v3 7.8
EPSS 0.0017
EPSS Percentile 38.5%
Attack Vector LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Classification

CWE
CWE-502
Status published

Affected Products (2)

druva/insync_client < 7.0.0
druva/insync_client < 7.0.0

Timeline

Published Jul 12, 2022
Tracked Since Feb 18, 2026