CVE-2017-2675

Little Snitch 3.0–3.7.3 contains a local privilege escalation in the installer related to writing the configuration file at.obdev.littlesnitchd.plist to /Library/LaunchDaemons. The CVSSv3 context indicates LOCAL attack with HIGH impact to confidentiality, integrity, and availability, and LOW priv...

CVE-2018-10470

Summary: CVE-2018-10470 affects Objective Development Little Snitch 4.0–4.0.6. The root cause is failing to pass the kSecCSCheckAllArchitectures flag to SecStaticCodeCheckValidityWithErrors(), so fat binaries with multiple architectures may cause the running process to appear unsigned while the o...