Vulnerability in Logius Digid For macOS

CVE-2026-103316

The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. An attacker with local user-level code execution can execute arbitrary code within the macOS version of the DigiD app, thereby gaining access to DigiD data and cryptographic capabilities that the process normally does not have. Reported by Kun Peeks (@SwayZGl1tZyyy)

Published · last modified .

CVSS v3 metric

CVSS v3 base score 7.1 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.

EPSS exploit prediction

No EPSS score from FIRST.org yet. New CVEs usually get one within a few days; no score means no signal yet, not low risk. How EPSS works.

Affected products

References

Frequently asked questions

What is CVE-2026-103316?
CVE-2026-103316 is a high-severity vulnerability in Logius Digid For macOS. CVSS score: 7.1/10. Published 2026-10-13.
How severe is CVE-2026-103316?
High severity. CVSS v3 base score is 7.1 out of 10.