https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 01:54:22 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-45590 EUVD-2026-45590 https://cve.radiocsirt.org/vuln/euvd-2026-45590 https://cve.radiocsirt.org/vuln/fkie_cve-2020-25533 <p>An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct a situation where the same PID is used for running two different programs at different times, by leveraging a race condition during crafted use of posix_spawn.</p> <p>An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct a situation where the same PID is used for running two different programs at different times, by leveraging a race condition during crafted use of posix_spawn.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-25533 https://cve.radiocsirt.org/vuln/ghsa-p523-j8f3-523j <p>An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct a situation where the same PID is used for running two different programs at different times, by leveraging a race condition during crafted use of posix_spawn.</p> <p>An issue was discovered in Malwarebytes before 4.0 on macOS. A malicious application was able to perform a privileged action within the Malwarebytes launch daemon. The privileged service improperly validated XPC connections by relying on the PID instead of the audit token. An attacker can construct a situation where the same PID is used for running two different programs at different times, by leveraging a race condition during crafted use of posix_spawn.</p> https://cve.radiocsirt.org/vuln/ghsa-p523-j8f3-523j https://cve.radiocsirt.org/vuln/gsd-2020-25533 gsd-2020-25533 https://cve.radiocsirt.org/vuln/gsd-2020-25533