← All reports

The ClearanceKit software has vulnerabilities that allow processes with an empty Team ID and non-empty Signing ID to be incorrectly treated as Apple platform binaries.

CybersecurityTechnologyConflictOperating SystemsApr 21, 2026score 0.172 posts · 0 replies across 1 instances
The thread discusses two vulnerabilities in the ClearanceKit software, which intercepts file-system access events on macOS. These vulnerabilities allow processes with specific characteristics to be treated as Apple platform binaries or suspended, potentially leading to security risks.

Claims

The ClearanceKit software has vulnerabilities that allow processes with an empty Team ID and non-empty Signing ID to be incorrectly treated as Apple platform binaries.
Parent: CybersecurityEntity: ClearanceKitImpact: negativeDate: Apr 21, 2026Target: The ClearanceKit software's handling of process identification
The ClearanceKit software has a vulnerability that allows the opfilter system extension to be suspended with SIGSTOP or kill commands, potentially compromising its security functionality.
Parent: CybersecurityEntity: ClearanceKitImpact: negativeDate: Apr 21, 2026Target: The ClearanceKit software's security mechanisms

Source posts

@[email protected]
🚨 EUVD-2026-24209 📊 Score: 8.4/10 (CVSS v3.1) 📦 Product: clearancekit 🏢 Vendor: craigjbass 📅 Updated: 2026-04-21 📝 ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.5, ClearanceKit incorrectly treats a process with an empty Team ID and a non-empty Signing ID as an Apple platform binary. This bug allo... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24209 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 21, 2026
#euvd#cve#vulnerability#cybersecurity#infosec
@[email protected]
🚨 EUVD-2026-24213 📊 Score: 8.2/10 (CVSS v3.1) 📦 Product: clearancekit 🏢 Vendor: craigjbass 📅 Updated: 2026-04-21 📝 ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies. Prior to 5.0.6, the opfilter Endpoint Security system extension (bundle ID uk.craigbass.clearancekit.opfilter) can be suspended with SIGSTOP or kill ... 🔗 https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-24213 #cybersecurity #infosec #euvd #cve #vulnerability
1 boosts · 0 favs · 0 replies · Apr 21, 2026
#cybersecurity#infosec#euvd#cve#vulnerability