Login Request a demo
CL
Product
clearancekit
by craigjbass · last CVE Jul 20, 2026
8
CVEs
0
On KEV
8.7
Max CVSS
0
New 30D
Vulnerabilities8In the news0Timeline
Severity mix
Critical 0High 3Medium 5Low 0
Severity
All severities8Critical0High3Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add clearancekit to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-33631
8.7
0%
Mar 26
ClearanceKit: opfilter policy bypass via non-open file operations
Affected: < 4.2
CVE-2026-33632
7.8
0%
Mar 26
ClearanceKit: opfilter policy bypass via exchangedata and clone operations
Affected: < 4.2.4
CVE-2026-40599
7.1
0%
Apr 21
ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist
Affected: < 5.0.5
CVE-2026-47134
6.9
0%
Jul 20
ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy
Affected: < 5.0.10
CVE-2026-47133
6.9
0%
Jul 20
ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots
Affected: < 5.0.10
CVE-2026-40191
6.8
0%
Apr 10
ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path
Affected: < 5.0.4-beta-1f46165
CVE-2026-34218
5.5
0%
Mar 31
ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification
Affected: < 4.2.14
CVE-2026-40604
4.4
0%
Apr 21
ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement
Affected: < 5.0.6
Showing 8