craigjbass clearancekit

• CVE-2026-47134 Medium 6.9 ClearanceKit: Policy signing key in System Keychain has permissive ACL allowing any local-root process to forge signed policy 0.2%
• CVE-2026-47133 Medium 6.9 ClearanceKit's signed policy tables lack monotonic counter, allowing replay of older legitimately-signed snapshots 0.2%
• CVE-2026-40604 High 8.2 ClearanceKit: opfilter system extension can be suspended or signalled by a root process, disabling file-access policy enforcement 0.1%
• CVE-2026-40599 High 8.4 ClearanceKit: Ad-hoc signed binaries can spoof Apple process identities in the global allowlist 0.1%
• CVE-2026-40191 Medium 6.8 ClearanceKit has a policy bypass via dual-path Endpoint Security events checking only source path 0.1%
• CVE-2026-34218 Medium 5.5 ClearanceKit: Managed and user-defined policy rules not enforced between opfilter start and first policy modification 0.2%
• CVE-2026-33632 High 8.4 ClearanceKit: opfilter policy bypass via exchangedata and clone operations 0.1%
• CVE-2026-33631 High 8.7 ClearanceKit: opfilter policy bypass via non-open file operations 0.1%