CVE-2026-47134 | craigjbass clearancekit up to 5.0.9 EC Key store.db SecItemAdd kSecAttrAccess random values

July 20, 2026 Yanac

A vulnerability, which was classified as problematic, has been found in craigjbass clearancekit up to 5.0.9. This affects the function SecItemAdd of the file store.db of the component EC Key. This manipulation of the argument kSecAttrAccess causes insufficiently random values.

This vulnerability appears as CVE-2026-47134. The attack requires local access. There is no available exploit.VulDB Recent EntriesRead More