A fallback mechanism in code sign checking on macOS may allow arbitrary code execution. This issue affects Zscaler Client Connector on MacOS prior to 4.2.
No PoCs from references.
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/p4yl0ad/p4yl0ad