Vulnerability Spotlight: Multiple vulnerabilities in Wacom Update Helper
Summary: Cisco Talos's Tyler Bohan found two privilege escalation vulnerabilities in the Wacom update helper, a utility installed with the macOS Wacom tablet application. Both flaws let a user with local access raise privileges to root: the startProcess command executes a user-supplied script argument under root context, and the start/stopLaunchDProcess command executes launchctl under root context to load arbitrary launchD agents.
Why it matters: Talos confirmed the Wacom driver on macOS versions 6.3.32.2 and 6.3.32.3 is affected, so any Mac running that tablet software carries a local path to root until the update is applied.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2019-5012CVE-2019-5013
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026