CVE-2018-6336

CVE-2018-6336 describes a vulnerability in osquery versions prior to 3.2.7 where maliciously crafted Universal/fat binaries could bypass third-party code signing checks. This allowed unsigned, malicious code to execute while appearing legitimately signed by Apple. The vulnerability carries a CVSS v3.1 score of 7.8 (High), indicating that a local attacker, with user interaction, could achieve high impacts on confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion, though it did receive limited media coverage.