SP
Vendor
sparkle-project
1 product with CVEs on record
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-47122
SP
Sparkle
sparkle-project
4.2
0%
Jul 21Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection
CVE-2026-47121
SP
Sparkle
sparkle-project
6.1
0%
Jul 21Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta
CVE-2025-10016
SP
Sparkle
Sparkle Project
8.8
0%
Sep 16Local Privilege Escalation in Sparkle Autoupdate Daemon
CVE-2025-10015
SP
Sparkle
Sparkle Project
4.8
0%
Sep 16TCC Bypass via Downloader XPC Service in Sparkle
CVE-2025-0509
SP
Sparkle
Sparkle-project
6.8
1%
Feb 4A security issue was found in Sparkle before version 2.6.4