CVE-2026-24070: Untrusted Search Path

During the installation of the Native Access application, a privileged helper com.native-instruments.NativeAccess.Helper2, which is used by Native Access to trigger functions via XPC communication like copy-file, remove or set-permissions, is deployed as well. The communication with the XPC servi...

CVE-2024-42219

1Password for macOS (AgileBits) is affected: versions prior to 8.10.36 are vulnerable to an inter-process communication bypass due to insufficient XPC IPC validation, enabling local attackers to exfiltrate vault items. Remediation: update to 8.10.36 or later. Affected product/version details and ...