PT-2025-37918

Name of the Vulnerable Software and Affected Versions Sparkle versions prior to 2.7.2 Description The Sparkle framework’s Autoupdate tool lacks authentication for connecting clients. This allows a local, unprivileged attacker to request the installation of a crafted malicious PKG file, leading to...