Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:little_snitch:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductLittle Snitch (ab1d8226-7076-5c25-af5e-0c8cdb76b7a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13095 vulnerable 2026-06-08 05:18:00.166123 Details available
Little Snitch version 4.5.1 and older changed ownership of a directory path controlled by the user. This allowed the user to escalate to root by linking the path to a directory containing code executed by root.
Published: 2020-06-30T16:33:54.000Z
Updated: 2024-08-04T12:11:19.272Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13014 vulnerable 2026-06-08 05:12:40.778965 Details available
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.
Published: 2019-08-23T16:55:55.000Z
Updated: 2024-08-04T23:41:10.142Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-13013 vulnerable 2026-06-08 05:12:40.777862 Details available
Little Snitch versions 4.3.0 to 4.3.2 have a local privilege escalation vulnerability in their privileged helper tool. The privileged helper tool implements an XPC interface which is available to any process and allows directory listings and copying files as root.
Published: 2019-08-23T16:58:49.000Z
Updated: 2024-08-04T23:41:10.198Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.