https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2017-16945.htmlhttps://patchthecve.com/cve/CVE-2017-16945.htmlWed, 17 Jun 2026 01:10:11 +0000HIGH 7.8: The standardrestorer binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted restore path.https://patchthecve.com/cve/CVE-2017-16928.htmlhttps://patchthecve.com/cve/CVE-2017-16928.htmlWed, 17 Jun 2026 01:10:09 +0000HIGH 7.8: The arq_updater binary in Arq 5.10 and earlier for Mac allows local users to write to arbitrary files and consequently gain root privileges via a crafted update URL, as demonstrated by file:///tmp/blah/Arq.zip.https://patchthecve.com/cve/CVE-2017-16895.htmlhttps://patchthecve.com/cve/CVE-2017-16895.htmlWed, 17 Jun 2026 01:10:06 +0000HIGH 7.8: The (1) arq_updater, (2) arqcommitter, (3) standardrestorer, (4) arqglacierrestorer, and (5) arqs3glacierrestorer helper apps in Arq 5.x before 5.10 for Mac allow local users to gain root privileges via a crafted data packet.https://patchthecve.com/cve/CVE-2017-15357.htmlhttps://patchthecve.com/cve/CVE-2017-15357.htmlWed, 17 Jun 2026 01:07:41 +0000HIGH 7.4: The setpermissions function in the auto-updater in Arq before 5.9.7 for Mac allows local users to gain root privileges via a symlink attack on the updater binary itself.