CVE-2026-7483

EUVD-2026-48551 HIGH

Improper Privilege Management (CWE-269)

2026-07-24 security@eset.com

GHSA-7vxw-2g46-q538

Privilege Escalation

8.5

CVSS 4.0 · Vendor: eset

Severity by source

Vendor (eset) PRIMARY

8.5 HIGH

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Primary rating from Vendor (eset) · only source for this CVE.

CVSS VectorVendor: eset

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 11:53 vuln.today

CVE Published

Jul 24, 2026 - 10:16 cve.org

HIGH 8.5

DescriptionCVE.org

Local privilege escalation potentially allowed an attacker to write an arbitrary file with fully controlled content as a privileged user.

AnalysisAI

Local privilege escalation in ESET Endpoint Security and Cyber Security for macOS allows a low-privileged local attacker to write arbitrary files with controlled content as root, leading to full system compromise. The vulnerability affects multiple versions of the macOS security applications and is addressed in a vendor patch. No active exploitation has been reported, and the EPSS score is low at 0.12%, but exploitation would give an attacker complete control over the system.