Libuv
1 CVEs
product
Monthly
libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.
Information Disclosure
Node.js
Fedora
Node Js
Libuv
+1
NVD
GitHub
CVSS 2.0
10.0
EPSS
1.6%
EPSS 2%
CVSS 10.0
CRITICAL
PATCH
Act Now
libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors. Rated critical severity (CVSS 10.0), this vulnerability is remotely exploitable, low attack complexity.
Information Disclosure
Node.js
Fedora
+3
NVD
GitHub