CVE-2026-24065

Waves Central for macOS versions 13.0.9 through 16.5.5 contains a local privilege escalation vulnerability in its privileged helper service . The service insecurely validates connecting XPC clients using process identifiers (PID) to verify code-signing identity. Due to PID reuse, a local attacker...

CVE-2026-24065 Local Privilege Escalation via Insecure XPC Client Validation in Waves Central for macOS

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability in the privileged helper service. The helper validates connecting XPC clients using the client process identifier PID to verify code-signing identity. Because process identifiers can be reuse...