Advisories · Technology
craigjbass clearancekit.
Every CVE that names craigjbass clearancekit among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy
- craigjbass clearancekit
- Broken access control
- CVSS 6.9 Medium
ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots
- craigjbass clearancekit
- Authentication bypass
- CVSS 8.2 High
ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement
- craigjbass clearancekit
- CWE-693
- CVSS 8.4 High
ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist
- craigjbass clearancekit
- Broken access control
- CVSS 6.8 Medium
ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path
- craigjbass clearancekit
- Broken access control
- CVSS 6.3 Medium
ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification
- craigjbass clearancekit
- Privilege escalation
- CVSS 8.4 High
ClearanceKit: opfilter policy bypass via exchangedata and clone operations
- craigjbass clearancekit
- Broken access control
- CVSS 8.7 High
ClearanceKit: opfilter policy bypass via non-open file operations
- craigjbass clearancekit
- Broken access control