SP
Vendor
sparkle-project
5
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-47122 | SP Sparkle sparkle-project | 4.2 | Jul 21 | Sparkle's AppInstaller post-stage-1 XPC listener accepts unvalidated connections, allowing spoofed appcast item data injection |
| CVE-2026-47121 | SP Sparkle sparkle-project | 6.1 | Jul 21 | Sparkle: Binary delta apply intermediate-symlink traversal in malicious .delta |
| CVE-2025-10016 | SP Sparkle Sparkle Project | 8.8 | Sep 16 | Local Privilege Escalation in Sparkle Autoupdate Daemon |
| CVE-2025-10015 | SP Sparkle Sparkle Project | 4.8 | Sep 16 | TCC Bypass via Downloader XPC Service in Sparkle |
| CVE-2025-0509 | SP Sparkle Sparkle-project | 6.8 | Feb 4 | A security issue was found in Sparkle before version 2.6.4 |
