What’s Vulnerable › Vulnerabilities

CVE-2023-27574

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-03-03 · updated 2026-06-17
• Weakness: CWE-494

Description

ShadowsocksX-NG 1.10.0 signs with com.apple.security.get-task-allow entitlements because of CODE_SIGNING_INJECT_BASE_ENTITLEMENTS.

Affected products

• Shadowsocksx-Ng: 1.10.0

References

• https://github.com/shadowsocks/ShadowsocksX-NG/pull/1456
• https://shadowsocks.org
• https://github.com/shadowsocks/ShadowsocksX-NG/pull/1456
• https://shadowsocks.org

Get alerted when CVE-2023-27574 or the next vulnerability affects your stack