Sparkle vulnerabilities

1 known vulnerability in Sparkle from Sparkle-project. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  Sparkle: Incorrect Authorization

  CVE-2025-10016Sep 16, 2025Sparkle-project

  The Sparkle framework includes a helper tool Autoupdate. Due to lack of authentication of connecting clients a local unprivileged attacker can request installation of crafted malicious PKG file by racing to connect to the daemon when other app spawns it as roo