Vulnerability details

CVE-2025-13733

Dr.Buho BuhoNTFS

BuhoNTFS 1.3.2 - Local Privilege Escalation

CVSS 4.0

8.5High

Official description

BuhoNTFS contains an insecure XPC service that allows local, unprivileged users to escalate their privileges to root via insecure functions.This issue affects BuhoNTFS: 1.3.2.

CVSS scores

Score	Version	Source	Vector
8.5High	4.0	CVEProject cvelistV5 (CNA) (Fluid Attacks)	`CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N`

Affected products

Vendor	Product	Versions	Source
Dr.Buho	BuhoNTFS	1.3.2	CVEProject cvelistV5 (CNA)

References and advisories

https://www.drbuho.com/buhontfs product
https://www.drbuho.com/download/buhontfs.dmg patch
https://fluidattacks.com/advisories/greenday third-party-advisory

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2025-12-12
Last updated: 2026-01-15
State: Published
Assigner (CNA): Fluid Attacks

Exploit prediction (EPSS)

0.2%

Probability of exploitation in 30 days

11%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: Proof of concept
Technical impact: Total

Weaknesses (CWE)

CWE-732
Incorrect Permission Assignment for Critical Resource