VULNERABILITY INTELLIGENCE
CVE-2025-10906
CVSS score8.4 HIGH
EPSS probability0.22%
CISA KEVNot currently listed
Published2025-09-24
Last modified2026-09-26
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A flaw has been found in Magnetism Studios Endurance up to 3.3.0 on macOS. This affects the function loadModuleNamed:WithReply of the file /Applications/Endurance.app/Contents/Library/LaunchServices/com.MagnetismStudios.endurance.helper of the component NSXPC Interface. Executing manipulation can lead to missing authentication. The attack needs to be launched locally. The exploit has been published and may be used.
Weakness classification
- cna@vuldb.com: CWE-287