7 matches found
CVE-2026-16477
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
CVE-2026-16477
The software CleanShot X for macOS is vulnerable to an insecure deserialization flaw when processing .cleanshot project files (used for editable screenshot annotations). An attacker can craft a malicious file that, when opened by a target user, triggers automatic execution of a payload during the...
EUVD-2026-108208
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
CVE-2026-16477 Insecure Deserialization of .cleanshot Files in CleanShot X
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
CVE-2026-16477 Insecure Deserialization of .cleanshot Files in CleanShot X
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
PT-2026-121406
CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file editable screenshot annotations. Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and have the target open it; the payload then executes automaticall...
MTW CleanShot X deserialization injection vulnerability
MTW CleanShot versions prior to 4.0.0 through 4.5.2, 4.6.0 through 4.6.3, 4.7.0 through 4.7.8, and 4.8.0 through 4.8.10 contain a deserialization injection vulnerability. This vulnerability stems from unsafe deserialization of untrusted data embedded in .cleanshot project files. It may allow...