CVE-2006-1442: Apple Mac OS X

High severity, CVSS 7.5. EPSS: 3% chance of exploitation in the next 30 days.

The bundle API in CoreFoundation in Apple Mac OS X 10.3.9 and 10.4.6 loads dynamic libraries even if the client application has not directly requested it, which allows attackers to execute arbitrary code from an untrusted bundle.

Affected products

• Apple Mac OS X: version 10.3.9 only; version 10.4.6 only

Published 2006-05-12. Last modified 2026-06-16.