2 matches found
CVE-2026-24067: Time-of-check Time-of-use (TOCTOU) Race Condition
Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.tool2. The helper validates connecting XPC clients by obtaining the client's process identifier and...
8.4CVSS5.8AI score0.00131EPSS
SaveExploits1References2
CVE-2026-24066: Improper Following of a Certificate's Chain of Trust
Slate Digital Connect 1.37.0 for macOS installs a privileged helper tool, com.slatedigital.connect.privileged.helper.tool, which exposes the XPC service com.slatedigital.connect.privileged.helper.tool2. The helper validates connecting XPC clients by checking only the subject.OU value of the...
8.4CVSS5.8AI score0.00122EPSS
SaveExploits1References2
20