CR
Vendor
craigjbass
8
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47134 | CL clearancekit craigjbass | 6.9 | Jul 20 | ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy |
| CVE-2026-47133 | CL clearancekit craigjbass | 6.9 | Jul 20 | ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots |
| CVE-2026-40604 | CL clearancekit craigjbass | 4.4 | Apr 21 | ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement |
| CVE-2026-40599 | CL clearancekit craigjbass | 7.1 | Apr 21 | ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist |
| CVE-2026-40191 | CL clearancekit craigjbass | 6.8 | Apr 10 | ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path |
| CVE-2026-34218 | CL clearancekit craigjbass | 5.5 | Mar 31 | ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification |
| CVE-2026-33632 | CL clearancekit craigjbass | 7.8 | Mar 26 | ClearanceKit: opfilter policy bypass via exchangedata and clone operations |
| CVE-2026-33631 | CL clearancekit craigjbass | 8.7 | Mar 26 | ClearanceKit: opfilter policy bypass via non-open file operations |