CVE-2025-8533 in Fantastical
Résumé
par MITRE • 07/08/2025
A vulnerability was identified in the XPC services of Fantastical. The services failed to implement proper client authorization checks in its listener:shouldAcceptNewConnection method, unconditionally accepting requests from any local process. As a result, any local, unprivileged process could connect to the XPC service and access its methods.
This issue has been resolved in version 4.0.16.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.