Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

clearancekit — Vulnerabilities & Security Advisories 8

All 8 CVE vulnerabilities found in clearancekit, with AI-generated Chinese analysis, references, and POCs.

Vendor: craigjbass

CVE IDTitleCVSSSeverityPublished
CVE-2026-47134 ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy CWE-732--2026-07-20
CVE-2026-47133 ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots CWE-294--2026-07-20
CVE-2026-40604 ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement CWE-693 7.1AIHighAI2026-04-21
CVE-2026-40599 ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist CWE-863 6.2AIMediumAI2026-04-21
CVE-2026-40191 ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path CWE-863 7.8 -2026-04-10
CVE-2026-34218 ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification CWE-269 7.7AIHighAI2026-03-31
CVE-2026-33632 ClearanceKit: opfilter policy bypass via exchangedata and clone operations CWE-862 5.5 -2026-03-26
CVE-2026-33631 ClearanceKit: opfilter policy bypass via non-open file operations CWE-862 8.7 High2026-03-26

All 8 known CVE vulnerabilities affecting clearancekit with full Chinese analysis, references, and POCs where available.