Dr.Buho vulnerabilities

Products

• BuhoCleaner 1
• BuhoNTFS 1

Latest Dr.Buho CVEs

Newest publication first

1. CVE-2026-0924 BuhoCleaner 1.15.2 - Local Privilege Escalation via PID reuse attack

   Published 2026-02-02

   High·CVSS 7.3 EPSS 0.18%

   BuhoCleaner contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoCleaner: 1.15.2.

2. CVE-2025-13733 BuhoNTFS 1.3.2 - Local Privilege Escalation

   Published 2025-12-12

   High·CVSS 8.5 EPSS 0.22%

   BuhoNTFS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoNTFS: 1.3.2.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.