craigjbass clearancekit vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Latest craigjbass clearancekit vulnerabilities

CVE-2026-47134 — ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy (CVSS 6.9)
CVE-2026-47133 — ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots (CVSS 6.9)
CVE-2026-40604 — ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement (CVSS 4.4)
CVE-2026-40599 — ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist (CVSS 7.1)
CVE-2026-40191 — ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path (CVSS 6.8)
CVE-2026-34218 — ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification (CVSS 5.5)
CVE-2026-33632 — ClearanceKit: opfilter policy bypass via exchangedata and clone operations (CVSS 7.8)
CVE-2026-33631 — ClearanceKit: opfilter policy bypass via non-open file operations (CVSS 8.7)