Skip to content
OpenAdvisories

Vendor

craigjbass

8 known vulnerabilities.

Products

clearancekit 8
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • High 8.2
    CVE-2026-40604

    ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.6, the opfilter Endpoint Security system extension (bundle ID uk.craigbass.clearancekit.opfilter) can be suspended with SIGSTOP or kill -STOP, or…

    craigjbass clearancekit
  • High 8.4
    CVE-2026-40599

    ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID and a non-empty Signing ID as an Apple platform binary. This bug allows a mali…

    craigjbass clearancekit
  • High 8.4
    CVE-2026-33632

    ClearanceKit: opfilter policy bypass via exchangedata and clone operations

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to version 4.2.4, two file operation event types — ES_EVENT_TYPE_AUTH_EXCHANGEDATA and ES_EVENT_TYPE_AUTH_CLONE — were not intercepted by ClearanceKit's…

    craigjbass clearancekit
  • High 8.7
    CVE-2026-33631

    ClearanceKit: opfilter policy bypass via non-open file operations

    ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. In versions on the 4.1 branch and earlier, the opfilter Endpoint Security system extension enforced file access policy exclusively by intercepting ES_EVENT_TY…

    craigjbass clearancekit