TI-2026-29335 CVE-2026-40599
ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist
Priority HIGH 72
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.
craigjbass
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
craigjbass records in CISA KEVNo craigjbass vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
Priority LOW 38
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.
TI-2026-26013 CVE-2026-33632
ClearanceKit: opfilter policy bypass via exchangedata and clone operations
Priority LOW 37
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.
Priority LOW 34
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.
TI-2026-29005 CVE-2026-40191
ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path
Priority LOW 31
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.
Priority LOW 29
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.
TI-2026-34724 CVE-2026-47133
ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots
Priority LOW 29
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.
TI-2026-26513 CVE-2026-34218
ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification
Priority LOW 27
ClearanceKit intercepts file-system access events on macOS and enforces per-process access policies.