CVE-2018-8076

ZenMate 1.5.4 for macOS contains a type confusion vulnerability in the com.zenmate.chron-xpc LaunchDaemon. The LaunchDaemon exposes an XPC service that uses an insecure XPC API to access data from inbound messages, potentially allowing an attacker-controlled input to pass an object of the wrong t...