Export limit exceeded: 11550 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-78236

Insecure PIN derivation mechanism in Admin By Request (ABR)

An insecure PIN derivation mechanism in ABR allows a low-privileged user to escalate privileges to administrator by communicating over Cross-Process Communication (XPC) while masquerading as an Apple-signed process.

CVSS 3.1 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Admin By Request (abr)
Products
Admin By Request (abr)
CVE-2026-78237

Insufficient input validation in Admin By Request (ABR)

Insufficient input validation in ABR allows a low-privileged user to inject malicious entries into the sudoers file, resulting in persistent root access that remained effective after the ABR session ended.

CVSS 3.1 · 7.8 High EPSS < 1% KEV · Not listed
Vendors
Admin By Request (abr)
Products
Admin By Request (abr)