Security experts disclosed a locally exploitable kernel-level vulnerability in the Webroot SecureAnywhere macOS security software. An attacker that exploit the flaw could execute malware at the kernel level on a vulnerable Mac system. The vulnerability, tracked as CVE-2018-16962, was patched months ago but publicly disclosed only yesterday. The flaw was caused by the lack of validation of arbitrary user-supplied pointer being read from and potentially written too. It is exploitable only by a local attacker or by tricking an already logged-in user.”]
Source: https://securityaffairs.co/wordpress/76220/hacking/webroot-secureanywhere-flaw.html