Filtered by vendor Objective Development Subscriptions
Filtered by product Little Snitch Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2018-10470 2 Apple, Objective Development 2 Macos, Little Snitch 2024-09-16 5.3 Medium
Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefore do not validate all architectures stored in a fat binary. An attacker can maliciously craft a fat binary containing multiple architectures that may cause a situation where Little Snitch treats the running process as having no code signature at all while erroneously indicating that the binary on disk does have a valid code signature. This could lead to users being confused about whether or not the code signature is valid.
CVE-2017-2675 2 Obdev, Objective Development 2 Little Snitch, Little Snitch 2024-08-05 N/A
Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /Library/LaunchDaemons.