Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2026-24062

Insufficient XPC Client validation leading to local privilege escalation in Arturia Software Center

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
SEC-VLab

Description

The "Privileged Helper" component of the Arturia Software Center (MacOS) does not perform sufficient client code signature validation when a client connects. This leads to an attacker being able to connect to the helper and execute privileged actions leading to local privilege escalation.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Arturia Software Center

Default version status: unknown

  • 2.12.0.3157affected

References