CVE record · 1 source
CVE-2026-103316
CVSS 7.1The macOS version of the DigiD app is not signed with Hardened Runtime.
- Vendor
- Apple
- Product
- macos
- CVSS
- 7.1
- EPSS
- 0.001 (p1)
- Exposure class
- Operating system
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
The macOS version of the DigiD app is not signed with Hardened Runtime.
The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. An attacker with local user-level code execution can execute…