https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T01:59:01.954039+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-12374 CVE-2026-12374 — Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool 2026-10-06T01:59:01.969332+00:00

Affected: Cato Networks SDP Client

Improper certificate validation and a time-of-check time-of-use (TOCTOU) race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller verification and a symlink swap during package installation.