Shirt-pocket vulnerabilities
We track 3 vulnerabilities in Shirt-pocket products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on January 29, 2026.
Latest Shirt-pocket vulnerabilities
- 7.8 High severity
Superduper!: Incorrect Default Permissions
An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
- 7.8 High severity
Superduper!: Incorrect Default Permissions
An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thus bypassing macOS privacy controls.
- 8.1 High severity
Superduper!: Improper Access Control
Incorrect access control in the SDAgent component of Shirt Pocket SuperDuper! v3.10 allows attackers to escalate privileges to root due to the improper use of a setuid binary.