Lucene search
K

5 matches found

RedhatCVE
RedhatCVE
added 2025/06/23 8:40 a.m.7 views

CVE-2025-5963

The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library Dylib injection. A local attacker with unprivileged access can use environmen...

4.8CVSS7.4AI score0.0017EPSS
Exploits0References1
NVD
NVD
added 2025/06/20 10:15 a.m.6 views

CVE-2025-5963

The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library Dylib injection. A local attacker with unprivileged access can use environmen...

4.8CVSS0.0017EPSS
Exploits0References2
Vulnrichment
Vulnrichment
added 2025/06/20 10:1 a.m.5 views

CVE-2025-5963 TCC Bypass via Dylib Injection in Postbox

The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library Dylib injection. A local attacker with unprivileged access can use environmen...

4.8CVSS7.3AI score0.0017EPSS
Exploits0References2
CVE
CVE
added 2025/06/20 10:1 a.m.14 views

CVE-2025-5963

The CVE-2025-5963 issue affects Postbox on macOS. The vulnerability arises from specific entitlements (com.apple.security.cs.allow-dyld-environment-variables and com.apple.security.cs.disable-library-validation) that enable Dynamic Library (Dylib) injection via environment variables (e.g., DYLD_I...

4.8CVSS6.7AI score0.0017EPSS
Exploits0References2
Cvelist
Cvelist
added 2025/06/20 10:1 a.m.11 views

CVE-2025-5963 TCC Bypass via Dylib Injection in Postbox

The Postbox's configuration on macOS, specifically the presence of entitlements: "com.apple.security.cs.allow-dyld-environment-variables" and "com.apple.security.cs.disable-library-validation" allows for Dynamic Library Dylib injection. A local attacker with unprivileged access can use environmen...

4.8CVSS0.0017EPSS
Exploits0References2
Rows per page
Query Builder