Every CVE Search/ Get API key

CVE-2017-7690

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by...

7.8 HighPublic exploit

CVE-2017-7690 is a high vulnerability (CVSS 7.8) in Proxifier, published April 14, 2017. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 0.99%, the 62nd percentile. No source names a fixed version.

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.

Attack profile

How easy it is to exploit

Attack vector
Local
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

0.99%Down 0.5 points since Apr 14, 2021
90%50%10%1%

What each source reports

NVD Score used 7.8

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.

Record
CVE-2017-7690
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 2.0
7.2 HighAV:L/AC:L/Au:N/C:C/I:C/A:C
Weakness
CWE-78
Updated
2026-11-02
CVE List No score

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.

Record
CVE-2017-7690
Updated
2026-11-02
EUVDEUVD-2017-16666 No score

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.

Record
EUVD-2017-16666
Updated
2026-11-03
GitHub AdvisoriesGHSA-wmrf-r2v7-34hw 7.8

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by...

Proxifier for Mac before 2.19.2, when first run, allows local users to gain privileges by replacing the KLoader binary with a Trojan horse program.

Record
GHSA-wmrf-r2v7-34hw
CVSS 3.1
7.8 HighCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-78
Updated
2026-11-02

Affected products

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
Exploit-DBProxifier for Mac 2.19 - Local Privilege Escalation2017-12-06

History

History
WhenChangedSources
2026-11-03aliasesEUVD
2026-11-02createdCVE List, Exploit-DB, GitHub Advisories, NVD

References

MoveEnter Open