VULNERABILITY INTELLIGENCE
CVE-2019-13014
CVSS score5.5 MEDIUM
EPSS probability0.35%
CISA KEVNot currently listed
Published2019-08-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.
Weakness classification
- CWE-459: Incomplete Cleanup