https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 04 Oct 2026 06:40:03 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-367854 EUVD-2026-367854 https://cve.radiocsirt.org/vuln/euvd-2026-367854 https://cve.radiocsirt.org/vuln/fkie_cve-2026-86819 <p>Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller&#39;s code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper&#39;s client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.</p> <p>Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller&#39;s code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper&#39;s client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-86819 https://cve.radiocsirt.org/vuln/ghsa-pvv8-qxr5-pq93 <p>Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller&#39;s code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper&#39;s client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.</p> <p>Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller&#39;s code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper&#39;s client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.</p> https://cve.radiocsirt.org/vuln/ghsa-pvv8-qxr5-pq93 https://cve.radiocsirt.org/vuln/va-26-251-02 <p>Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller&#39;s code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper&#39;s client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.</p> <p>Waves Central for macOS contains a local privilege escalation in the privileged helper service. The helper authorizes connecting XPC clients by comparing the caller&#39;s code-signing certificate chain for equality with its own, rather than validating the caller against a pinned code requirement (application identifier and Team ID). A local, authenticated user can execute code within the vendor-signed process, satisfy the helper&#39;s client check, and cause the helper to execute a script with root privileges. Fixed in 17.0.</p> https://cve.radiocsirt.org/vuln/va-26-251-02