CVE-2017-16928

CVE-2017-16928 is a local privilege escalation vulnerability affecting Arq 5.10 and earlier on macOS, where the arq_updater binary can be tricked into writing to arbitrary files. This vulnerability carries a high CVSS score of 7.8, indicating that a local attacker with low privileges can achieve high impact across confidentiality, integrity, and availability with low attack complexity. While not listed on the KEV catalog, an exploit is publicly available on ExploitDB, though there is no evidence of active exploitation or significant community discussion.