CVE-2026-24065

Waves Central for macOS versions 13.0.9 through 16.5.5 contains a local privilege escalation vulnerability in its privileged helper service . The service insecurely validates connecting XPC clients using process identifiers (PID) to verify code-signing identity. Due to PID reuse, a local attacker...