https://vulnogram.org/ Most recent CVEs assigned by Objective Development Software GmbH (obdev). https://vulnogram.org/seaview/icons/obdev.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:08 GMT https://vulnogram.org/CVE-2020-13095 https://vulnogram.org/CVE-2020-13095 Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root. Tue, 30 Jun 2020 16:33:54 GMT https://vulnogram.org/CVE-2019-13013 https://vulnogram.org/CVE-2019-13013 Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying… Fri, 23 Aug 2019 16:58:49 GMT https://vulnogram.org/CVE-2019-13014 https://vulnogram.org/CVE-2019-13014 Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after… Fri, 23 Aug 2019 16:55:55 GMT https://vulnogram.org/CVE-2018-10470 https://vulnogram.org/CVE-2018-10470 Little Snitch versions 4.0 to 4.0.6 use the SecStaticCodeCheckValidityWithErrors() function without the kSecCSCheckAllArchitectures flag and therefore do not validate all architectures stored in a fat binary. An attacker can maliciously craft a fat b… Tue, 12 Jun 2018 17:00:00 GMT https://vulnogram.org/CVE-2017-2675 https://vulnogram.org/CVE-2017-2675 Little Snitch version 3.0 through 3.7.3 suffer from a local privilege escalation vulnerability in the installer part. The vulnerability is related to the installation of the configuration file "at.obdev.littlesnitchd.plist" which gets installed to /L… Thu, 06 Apr 2017 15:00:00 GMT https://vulnogram.org/CVE-2016-8661 https://vulnogram.org/CVE-2016-8661 Little Snitch version 3.0 through 3.6.1 suffer from a buffer overflow vulnerability that could be locally exploited which could lead to an escalation of privileges (EoP) and unauthorised ring0 access to the operating system. The buffer overflow is re… Tue, 15 Nov 2016 15:00:00 GMT