HighCVSS 10.0
EPSS 3.2%
libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.