CVE-2026-12374 Improper XPC caller certificate validation and TOCTOU race condition in macOS PrivilegedHelperTool

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

CVE-2026-12374: Improper Certificate Validation

Improper certificate validation and a time-of-check time-of-use TOCTOU race condition in the PrivilegedHelperTool XPC service in Cato Client before v.5.13.1 on macOS allows a local authenticated attacker to escalate privileges to root via a self-signed certificate that bypasses the XPC caller...

CVE-2025-3886

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2025-3886

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2025-3886

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2025-3886 CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2025-3886 CatoNetworks CatoClient up to 5.8 PrivilegedHelperTool Race Condition

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2025-3886

CVE-2025-3886 affects CatoNetworks CatoClient prior to v5.8.0, via the PrivilegedHelperTool component, enabling privilege escalation through a TOCTOU race condition. The NVD entry lists CVSS 3.1: AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H (base 8.1, HIGH); ATT&CK not explicitly stated in provided docs. ...

CatoNetworks CatoClient 安全漏洞

CatoNetworks CatoClient is a security client software from CatoNetworks, Inc. for secure access to enterprise network resources, supporting global SD-WAN and security services. A security vulnerability exists in CatoNetworks CatoClient versions prior to 5.8.0, which stems from a competing conditi...

CVE-2025-3886: Concurrent Execution using Shared Resource with Improper Synchronization

An issue in CatoNetworks CatoClient before v.5.8.0 allows attackers to escalate privileges and achieve a race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2023-43976

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2023-43976

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2023-43976

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...

Race condition

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2023-43976

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...

Cato Client Security Vulnerability

Cato Client is a remote access application from Cato Corporation. A security vulnerability exists in Cato Client prior to version v.5.4.0, which stems from a vulnerability that allows an attacker to escalate privileges and win conditions of competition TOCTOU via the PrivilegedHelperTool componen...

CVE-2023-43976: Time-of-check Time-of-use (TOCTOU) Race Condition

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...

PT-2023-29053

Name of the Vulnerable Software and Affected Versions CatoNetworks CatoClient versions prior to 5.4.0 Description The issue allows attackers to escalate privileges by winning the race condition TOCTOU via the PrivilegedHelperTool component. This enables attackers to gain elevated access,...

CVE-2023-43976

An issue in CatoNetworks CatoClient before v.5.4.0 allows attackers to escalate privileges and winning the race condition TOCTOU via the PrivilegedHelperTool component...

CVE-2023-43976

Summary: A TOCTOU race condition in the PrivilegedHelperTool of CatoClient (pre‑5.4.0) enables elevated privileges. Root cause: race condition in PrivilegedHelperTool. Impact: privilege escalation; other impacts not detailed in the sources. Affected versions: CatoClient older than 5.4.0. Mitigati...