Craigjbass

Clearancekit

8 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.9

CVE-2026-47134

  • EPSS 0.11%
  • Veröffentlicht 20.07.2026 21:17:22
  • Zuletzt bearbeitet 23.07.2026 18:04:31

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. The ECDSA private key used to sign the on-disk policy database (`/Library/Application Support/clearancekit/store.db`) is stored in the macOS System K...

6.9

CVE-2026-47133

  • EPSS 0.11%
  • Veröffentlicht 20.07.2026 21:12:26
  • Zuletzt bearbeitet 23.07.2026 18:14:32

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 5.0.10, each table in the on-disk SQLite policy store (`/Library/Application Support/clearancekit/store.db`) is verified using an EC...

4.4

CVE-2026-40604

  • EPSS 0.11%
  • Veröffentlicht 21.04.2026 17:41:53
  • Zuletzt bearbeitet 24.04.2026 20:49:22

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.6, the opfilter Endpoint Security system extension (bundle ID uk.craigbass.clearancekit.opfilter) can be suspended with SIGSTOP or kill ...

7.1

CVE-2026-40599

Exploit
  • EPSS 0.13%
  • Veröffentlicht 21.04.2026 17:37:05
  • Zuletzt bearbeitet 24.04.2026 20:50:42

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID and a non-empty Signing ID as an Apple platform binary. This bug allo...

6.8

CVE-2026-40191

  • EPSS 0.12%
  • Veröffentlicht 10.04.2026 20:19:35
  • Zuletzt bearbeitet 16.04.2026 14:45:19

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.4-beta-1f46165, ClearanceKit's Endpoint Security event handler only checked the source path of dual-path file operations against File A...

6.3

CVE-2026-34218

Exploit
  • EPSS 0.2%
  • Veröffentlicht 31.03.2026 15:13:03
  • Zuletzt bearbeitet 24.07.2026 20:10:00

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.14, two related startup defects created a window during which only the single compile-time baseline rule was enforced by opfilte...

7.8

CVE-2026-33632

  • EPSS 0.1%
  • Veröffentlicht 26.03.2026 19:32:49
  • Zuletzt bearbeitet 21.04.2026 15:02:26

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.4, two file operation event types — ES_EVENT_TYPE_AUTH_EXCHANGEDATA and ES_EVENT_TYPE_AUTH_CLONE — were not intercepted by Clear...

8.7

CVE-2026-33631

  • EPSS 0.1%
  • Veröffentlicht 26.03.2026 19:30:30
  • Zuletzt bearbeitet 20.04.2026 20:22:55

ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ES...