CyberSecBulletin

Craigjbass vulnerabilities

We track 3 vulnerabilities in Craigjbass products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on April 21, 2026.

3vulnerabilities
0critical
3high
0exploited
7.9average CVSS score

Latest Craigjbass vulnerabilities

  • 7.1 High severity

    clearancekit: Incorrect Authorization

    CVE-2026-40599Craigjbass

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID and a non-empty Signing ID as an Apple platform binary. This bug allows a malic

  • 7.8 High severity

    clearancekit: Missing Authorization

    CVE-2026-33632Craigjbass

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.4, two file operation event types — ES_EVENT_TYPE_AUTH_EXCHANGEDATA and ES_EVENT_TYPE_AUTH_CLONE — were not intercepted by ClearanceKit's

  • 8.7 High severity

    clearancekit: Missing Authorization

    CVE-2026-33631Craigjbass

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ES_EVENT_TYP