{"metadata": {"vulnerability": "CVE-2026-103316", "count": 15, "kinds": {"milestone": 4, "sighting": 3, "kev": 0, "other": 8}}, "data": [{"timestamp": "2026-09-30T11:59:04.230Z", "date_only": false, "value": "2026-09-30T11:59:04.230Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2026-103316", "field": "cveMetadata.dateReserved"}, {"timestamp": "2026-10-13T06:06:57.552Z", "date_only": false, "value": "2026-10-13T06:06:57.552Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2026-103316", "field": "cveMetadata.datePublished"}, {"timestamp": "2026-10-13T06:06:57.552Z", "date_only": false, "value": "2026-10-13T06:06:57.552Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / NCSC-NL", "record": "CVE-2026-103316", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-13T06:40:50.819Z", "date_only": false, "value": "2026-10-13T06:40:50.819522Z", "kind": "sighting", "label": "Seen", "source": "https://infosec.exchange/users/cve/statuses/117432231548511832", "record": "CVE-2026-103316", "field": "creation_timestamp", "uuid": "0758a47f-eaa6-4bfd-8e16-7449612670c4", "content": "CVE-2026-103316 The macOS version of the DigiD app is not signed with Hardened Runtime The macOS version of the DigiD app is not signed with Hardened Runtime. As a result, a local process can load its own dylib into DigiD via DYLD_INSERT_LIBRARIES.  An attacker with local user-level code execution can execute arbitrary code within the macOS version of the DigiD app, thereby gaining access to DigiD data and cryptographic capabilities that the process normally does not have. Reported by Kun Peeks (@SwayZGl1tZyyy)\nhttps://www.cve.org/CVERecord?id=CVE-2026-103316https://apps.apple.com/us/app/digid/id1208460960#Logius #DigiDformacOS#CVE_2026_103316#bot", "url": "https://infosec.exchange/users/cve/statuses/117432231548511832"}, {"timestamp": "2026-10-13T06:48:31.682Z", "date_only": false, "value": "2026-10-13T06:48:31.682629Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/suriq.io/post/3mxqgtxrqe52l", "record": "CVE-2026-103316", "field": "creation_timestamp", "uuid": "a703eeda-2ec1-4c3b-9eae-228ca2d2d53d", "content": "CVE-2026-103316: Logius DigiD for macOS was not signed with Hardened Runtime, letting a local user who already has code execution inject a dylib and run code inside the app. Fixed in version 6.19.2. No in-the-wild exploitation is confirmed.", "url": "https://bsky.app/profile/suriq.io/post/3mxqgtxrqe52l"}, {"timestamp": "2026-10-13T07:16:30Z", "date_only": false, "value": "2026-10-13T07:16:30Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-W7V9-FJXV-67FF", "record": "GHSA-W7V9-FJXV-67FF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2026-10-13T07:16:30.490Z", "date_only": false, "value": "2026-10-13T07:16:30.490", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103316", "record": "FKIE_CVE-2026-103316", "field": "published"}, {"timestamp": "2026-10-13T09:30:42Z", "date_only": false, "value": "2026-10-13T09:30:42Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-W7V9-FJXV-67FF", "record": "GHSA-W7V9-FJXV-67FF", "field": "published"}, {"timestamp": "2026-10-13T09:30:42Z", "date_only": false, "value": "2026-10-13T09:30:42Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-W7V9-FJXV-67FF", "record": "GHSA-W7V9-FJXV-67FF", "field": "modified"}, {"timestamp": "2026-10-13T17:01:29.460Z", "date_only": false, "value": "2026-10-13T17:01:29.460216Z", "kind": "sighting", "label": "Seen", "source": "https://bsky.app/profile/postac001.bsky.social/post/3mxrj3zxsne2x", "record": "CVE-2026-103316", "field": "creation_timestamp", "uuid": "7c376fb6-d839-439c-bb53-4c223f158726", "content": "macOS\u7248DigiD\u30a2\u30d7\u30ea\u304cHardened Runtime\u3067\u7f72\u540d\u3055\u308c\u3066\u304a\u3089\u305a\u3001\u30ed\u30fc\u30ab\u30eb\u30d7\u30ed\u30bb\u30b9\u304c\u4efb\u610f\u306e\u30b3\u30fc\u30c9\u3092\u5b9f\u884c\u3057\u3001DigiD\u30c7\u30fc\u30bf\u3084\u6697\u53f7\u5316\u6a5f\u80fd\u3078\u306e\u30a2\u30af\u30bb\u30b9\u304c\u53ef\u80fd\u306b\u306a\u308b\u3002\nCVE-2026-103316 CVSS 7.1 | HIGH", "url": "https://bsky.app/profile/postac001.bsky.social/post/3mxrj3zxsne2x"}, {"timestamp": "2026-10-14T19:01:32.878Z", "date_only": false, "value": "2026-10-14T19:01:32.878526Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103316", "field": "containers.adp.0.metrics.0.other.content.timestamp"}, {"timestamp": "2026-10-14T19:01:32.878Z", "date_only": false, "value": "2026-10-14T19:01:32.878526Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103316", "record": "FKIE_CVE-2026-103316", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2026-10-14T19:02:00.648Z", "date_only": false, "value": "2026-10-14T19:02:00.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2026-103316", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2026-10-14T19:02:00.648Z", "date_only": false, "value": "2026-10-14T19:02:00.648Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2026-103316", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-10-14T19:17:06.610Z", "date_only": false, "value": "2026-10-14T19:17:06.610", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2026-103316", "record": "FKIE_CVE-2026-103316", "field": "lastModified"}]}