CVE-2026-70597

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...

EUVD-2026-53403

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...

CVE-2026-70597

Electron on macOS had a bug where the code-sign check that verifies a launched app’s parent process could be bypassed by a local attacker. This affects Electron versions prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3. By exploiting this, a local attacker could bypass the fuse-based hardening ...

CVE-2026-70597 Electron: Parent process code-sign check is spoofable

Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 39.8.8, 40.9.0, 41.2.1, and 42.0.0-beta.3, the check Electron uses on macOS to confirm it was launched by a same-signed parent process could be bypassed by a local process. Apps that...

MAL-2026-4398 Malicious code in @jonusnattapong/claudecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a08b3e13079279fb9dce40859dd868b0953bec139996eb7ac915a7dc415b29c Package is a third-party reconstruction of Anthropic's Claude Code CLI that misrepresents itself as the official product. package.json describes itse...

Malicious code in @jonusnattapong/claudecode (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 8a08b3e13079279fb9dce40859dd868b0953bec139996eb7ac915a7dc415b29c Package is a third-party reconstruction of Anthropic's Claude Code CLI that misrepresents itself as the official product. package.json describes itse...

CVE-2026-28864

This issue was addressed with improved permissions checking. This issue is fixed in iOS 18.7.7 and iPadOS 18.7.7, iOS 26.4 and iPadOS 26.4, macOS Sequoia 15.7.5, macOS Sonoma 14.8.5, macOS Tahoe 26.4, visionOS 26.4, watchOS 26.4. A local attacker may gain access to user's Keychain items...

EUVD-2015-5800

Malware in sbrugna...

EUVD-2015-6990

Malware in sbrugna...

EUVD-2017-11568

Malware in sbrugna...

EUVD-2012-3645

Malware in sbrugna...

EUVD-2015-5889

Malware in sbrugna...

EUVD-2005-2740

Malware in sbrugna...

EUVD-2017-16188

Malware in sbrugna...

EUVD-2015-6977

Malware in sbrugna...

EUVD-2024-52590

Malicious code in bioql PyPI...

EUVD-2025-23074

Malicious code in bioql PyPI...

CVE-2025-43251

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.6. A local attacker may gain access to Keychain items...

Unspecified Vulnerability in Apple macOS (CNVD-2025-17892)

Apple macOS Sequoia is an operating system from the American company Apple Apple. A security vulnerability exists in Apple macOS Sequoia versions prior to 15.6, which can be exploited by a local attacker to potentially access the Keychain project...

CVE-2025-43251

An authorization issue was addressed with improved state management. This issue is fixed in macOS Sequoia 15.6. A local attacker may gain access to Keychain items...