https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 08 Oct 2026 15:52:49 +0000 https://cve.radiocsirt.org/vuln/cve-2025-5963 <p><strong>Affected:</strong> Postbox</p> <p>The Postbox&#39;s configuration on macOS, specifically the presence of entitlements: &#34;com.apple.security.cs.allow-dyld-environment-variables&#34; and &#34;com.apple.security.cs.disable-library-validation&#34; allows for Dynamic Library (Dylib) injection. A local attacker with unprivileged access can use environment variables like DYLD_INSERT_LIBRARIES to successfully inject code in application&#39;s context and bypass Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission.</p> <p>The original company behind Postbox is no longer operational, the software will no longer receive updates. The acquiring company (em Client) did not cooperate in vulnerability disclosure.</p> <p><strong>Affected:</strong> Postbox</p> <p>The Postbox&#39;s configuration on macOS, specifically the presence of entitlements: &#34;com.apple.security.cs.allow-dyld-environment-variables&#34; and &#34;com.apple.security.cs.disable-library-validation&#34; allows for Dynamic Library (Dylib) injection. A local attacker with unprivileged access can use environment variables like DYLD_INSERT_LIBRARIES to successfully inject code in application&#39;s context and bypass Transparency, Consent, and Control (TCC). Acquired resource access is limited to previously granted permissions by the user. Access to other resources beyond granted-permissions requires user interaction with a system prompt asking for permission.</p> <p>The original company behind Postbox is no longer operational, the software will no longer receive updates. The acquiring company (em Client) did not cooperate in vulnerability disclosure.</p> https://cve.radiocsirt.org/vuln/cve-2025-5963