Skip to contentCraigjbass Clearancekit vulnerabilities
- craigjbass clearancekitClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policyCVE-2026-471346.9 Medium
- craigjbass clearancekitClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshotsCVE-2026-471336.9 Medium
- craigjbass clearancekitClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcementCVE-2026-406048.2 High
- craigjbass clearancekitClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlistCVE-2026-405998.4 High
- craigjbass clearancekitClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source pathCVE-2026-401916.8 Medium
- craigjbass clearancekitClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modificationCVE-2026-342186.3 Medium
- craigjbass clearancekitClearanceKit: opfilter policy bypass via exchangedata and clone operationsCVE-2026-336328.4 High
- craigjbass clearancekitClearanceKit: opfilter policy bypass via non-open file operationsCVE-2026-336318.7 High