27 matches found
EUVD-2020-7107
Malware in sbrugna...
EUVD-2016-2855
Malware in sbrugna...
EUVD-2025-23914
Malicious code in bioql PyPI...
EUVD-2022-27821
Malicious code in bioql PyPI...
CVE-2025-8533
A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client authorization checks in its listener:shouldAcceptNewConnection method, unconditionally accepting requests from any local process. As a result, any local, unprivileged process could...
CVE-2025-8533 Incorrect Authorization of XPC Service in Fantastical.app
A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client authorization checks in its listener:shouldAcceptNewConnection method, unconditionally accepting requests from any local process. As a result, any local, unprivileged process could...
CVE-2025-8533
Summary: CVE-2025-8533 affects Fantastical’s XPC services where listener:shouldAcceptNewConnection did not enforce proper client authorization, allowing any local unprivileged process to access XPC methods. Impact: local access to XPC service methods without authorization. Status & fix: issue res...
PT-2025-32260 · Flexibits · Fantastical
Name of the Vulnerable Software and Affected Versions: Fantastical versions prior to 4.0.16 Description: A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client authorization checks in its listener:shouldAcceptNewConnection method,...
CVE-2022-22676
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...
CVE-2020-14977
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execut...
CVE-2022-22676
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...
CVE-2022-22676
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...
CVE-2022-22676
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...
Input validation
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...
CVE-2022-22676
An event handler validation issue in the XPC Services API was addressed by removing the service. This issue is fixed in macOS Monterey 12.2. An application may be able to delete files for which it does not have permission...
CVE-2022-22676
CVE-2022-22676 describes an event handler validation issue in the XPC Services API. The vulnerability was addressed by removing the vulnerable service, and is fixed in macOS Monterey 12.2. The impact is that an application may be able to delete files for which it does not have permission. Remedia...
PT-2022-15623 · Apple · Apple Macos
Name of the Vulnerable Software and Affected Versions: macOS versions prior to 12.2 Description: An event handler validation issue in the XPC Services API was addressed by removing the service. This issue may allow an application to delete files for which it does not have permission...
CVE-2020-14977
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execut...
Code injection
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execut...
CVE-2020-14977
An issue was discovered in F-Secure SAFE 17.7 on macOS. The XPC services use the PID to identify the connecting client, which allows an attacker to perform a PID reuse attack and connect to a privileged XPC service, and execute privileged commands on the system. NOTE: the attacker needs to execut...