sparkle-project

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

sparkle-project records in CISA KEV

No sparkle-project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Sparkle · all components

TI-2026-34713 CVE-2026-47121 · GHSA-hg88-v3cw-3qrh

MEDIUM 60

Sparkle is a software update framework for macOS.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00339 Published 2026-07-21 Fixed in 2.9.2 CWE-22

TI-2025-00423 CVE-2025-0509 · GHSA-wc9m-r3v6-9p5h

LOW 36

A security issue was found in Sparkle before version 2.6.4.

CVSS 3.1HIGH 7.3 Adjacent network High privileges User interaction EPSS 0.00904 Published 2025-02-04 Fixed in 2.6.4 CWE-552

TI-2026-34714 CVE-2026-47122 · GHSA-g3hp-f6mg-559v

LOW 18

Sparkle is a software update framework for macOS.

CVSS 3.1MEDIUM 4.2 Local Low privileges No interaction EPSS 0.00105 Published 2026-07-21 No fix listed CWE-306