CVE-2026-24064

CVE-2026-24064 affects Waves Central for macOS (versions 13.0.9–16.5.5). Root cause: a trusted XPC client is signed with hardened runtime entitlements that permit dynamic library injection, allowing an attacker to set DYLD_INSERT_LIBRARIES and inject a library into the trusted client at launch. I...

EUVD-2026-35447

Waves Central for macOS versions 13.0.9 through 16.5.5 contain a local privilege escalation vulnerability. A trusted XPC client component included with the product is signed with hardened runtime entitlements that permit dynamic library injection. A local attacker can set the DYLDINSERTLIBRARIES...