Logius CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH Logius CVE published 2026-10-13

CVE-2026-103316

The macOS version of the DigiD app is not signed with Hardened Runtime, allowing a local process to load its own dylib into DigiD via DYLD_INSERT_LIBRARIES. This vulnerability can be exploited by an attacker with local user-level code execution to execute arbitrary code within the macOS version of the DigiD app, gaining access to DigiD data and cryptographic capabilities.