70 matches found
OpenSC.tokend
OpenSC.tokend 오픈 소스 OS X 스마트 카드 드라이버 tokend 는 스마트 카드의 키와 인증서가 Keychain Access.app 에 표시되고 Safari나 Chrome 같은 애플리케이션에서 사용할 수 있게 해줍니다. OpenSC.tokend는 OpenSC의 오픈 소스 tokend 구현체로, 실제로 볼 수 있는 다양한 실사용 PKI 스마트 카드를 지원합니다. OS X에서의 tokend 지원 역사 2005년 OS X 10.4 "Tiger"에서 Apple은 서드파티 스마트 카드를 다른 네이티브 OS X 애플리케이션...
CVE-2026-70597
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...
Electron: Parent process code-sign check is spoofable
Impact On macOS, the check Electron uses to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that enable the fuse-based hardening restricting ELECTRONRUNASNODE and NODEOPTIONS to same-signed parents rely on this check; a local attacker could bypas...
GHSA-JM7P-CC5G-QWXX Electron: Parent process code-sign check is spoofable
Impact On macOS, the check Electron uses to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that enable the fuse-based hardening restricting ELECTRONRUNASNODE and NODEOPTIONS to same-signed parents rely on this check; a local attacker could bypas...
CVE-2026-70597
Electron on macOS had a bug where the code-sign check that verifies a launched app’s parent process could be bypassed by a local attacker. This affects Electron versions prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3. By exploiting this, a local attacker could bypass the fuse-based hardening ...
EUVD-2026-53403
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...
CVE-2026-70597 Electron: Parent process code-sign check is spoofable
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...
CVE-2026-70597 Electron: Parent process code-sign check is spoofable
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...
CVE-2026-70597: Time-of-check Time-of-use (TOCTOU) Race Condition
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...
MAL-2026-4398 Malicious code in @jonusnattapong/claudecode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a08b3e13079279fb9dce40859dd868b0953bec139996eb7ac915a7dc415b29c Package is a third-party reconstruction of Anthropic's Claude Code CLI that misrepresents itself as the official product. package.json describes itse...
Malicious code in @jonusnattapong/claudecode (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a08b3e13079279fb9dce40859dd868b0953bec139996eb7ac915a7dc415b29c Package is a third-party reconstruction of Anthropic's Claude Code CLI that misrepresents itself as the official product. package.json describes itse...
CVE-2026-28864
This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A local attacker may gain access to user's Keychain items...
EUVD-2015-6990
Malware in sbrugna...
EUVD-2015-5800
Malware in sbrugna...
EUVD-2015-5889
Malware in sbrugna...
EUVD-2017-11568
Malware in sbrugna...
EUVD-2012-3645
Malware in sbrugna...
EUVD-2005-2740
Malware in sbrugna...