Approved changes feed: RSS · Atom

cpe:2.3:a:objective-see:knockknock:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorObjective See (e1b1238d-a732-57f7-8156-5ab46e84f8de)
ProductKnockknock (64c032fe-f6a6-5c39-8117-39aa071e0a04)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/objective-see/knockknock purl2cpe 2026-06-01 10:16:09.194008

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10404 vulnerable 2026-06-08 05:10:26.655202 Details available
An issue was discovered in Objective-See KnockKnock, LuLu, TaskExplorer, WhatsYourSign, and procInfo. A maliciously crafted Universal/fat binary can evade third-party code signing checks. By not completing full inspection of the Universal/fat binary, the user of the third-party tool will believe that the code is signed by Apple, but the malicious unsigned code will execute.
Published: 2018-06-13T22:00:00.000Z
Updated: 2024-08-05T07:39:07.336Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.