Skip to content
Craigjbass vulnerabilities
Newest
-
craigjbass clearancekit
ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy
CVE-2026-47134
6.9 Medium
-
craigjbass clearancekit
ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots
CVE-2026-47133
6.9 Medium
-
craigjbass clearancekit
ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement
CVE-2026-40604
8.2 High
-
craigjbass clearancekit
ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist
CVE-2026-40599
8.4 High
-
craigjbass clearancekit
ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path
CVE-2026-40191
6.8 Medium
-
craigjbass clearancekit
ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification
CVE-2026-34218
6.3 Medium
-
craigjbass clearancekit
ClearanceKit: opfilter policy bypass via exchangedata and clone operations
CVE-2026-33632
8.4 High
-
craigjbass clearancekit
ClearanceKit: opfilter policy bypass via non-open file operations
CVE-2026-33631
8.7 High