CVE-2026-24070

The Native Instruments Native Access application is vulnerable to a local privilege escalation flaw. The application is signed with the com.apple.security.cs.allow-dyld-environment-variables and com.apple.security.cs.disable-library-validation entitlements, which allows for DYLIB injection . An a...

CVE-2026-24071

The Native Access software, provided by Native Instruments, contains an XPC service vulnerability within its privileged helper. The service insecurely uses the PID of connecting clients to verify code signatures, specifically utilizing _xpc_connection_get_pid(arg2) as an argument for the hasValid...