P4Verified

CVE-2026-103316: DigiD for macOS <6.19.2

CVE-2026-103316. CVSS 3.1 base score 7.1 (HIGH, Vendor/CNA).

Affected technology

DigiD for macOS · <6.19.2
Logius

Description’s affected range: version of the DigiD app is not signed with Hardened Runtime

Component: Not specified by the source

Attack conditions (Vendor/CNA, CVSS 3.1): Local · Low privileges required · No user interaction required

What an attacker can do

An attacker with local user-level code execution can execute arbitrary code within the macOS version of the DigiD app, thereby gaining access to DigiD data and cryptographic capabilities that the process normally does not have. Vendor/CNA’s CVSS 3.1 assessment (base score 7.1/10) rates confidentiality and integrity impact as high; availability impact as none.

Published 13-Oct-2026 07:32 UTC

CCR priority: 28.4 /100 (P4)
CVSS 3.1: 7.1 /10 · CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N · Vendor/CNA
KEV: no

Provenance

NVD CVE API 2.0 · Source record · observed 2026-10-13 07:32:22.943473+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-103316.html