CVE-2026-107067
MediumCVSS 6.2Exploitation Probability (EPSS)
Low risk3th percentile - higher than 3% of all known CVEs
Summary
A vulnerability in Shirt Pocket's SuperDuper! 4.0.9 and earlier allows a local attacker to obtain sensitive information.
Risk Assessment
A local attacker may gain access to sensitive data on the affected system, potentially leading to its disclosure.
Recommendation
Update SuperDuper! to a version later than 4.0.9 or apply measures restricting local access to the system.
Other vulnerabilities in SuperDuper!
See all- CVE-2025-69604High
A vulnerability in SuperDuper! 3.11 and earlier allows a local attacker to modify the default task template to install an arbitrary package that can run shell scripts with root privileges and Full Disk Access, thereby bypassing macOS privacy controls.
- CVE-2025-61229High
A vulnerability in Shirt Pocket SuperDuper! 3.10 and earlier allows a local attacker to modify the default task template to execute an arbitrary preflight script with root privileges and Full Disk Access, thereby bypassing macOS privacy controls.
- CVE-2025-61228High
A vulnerability in Shirt Pocket SuperDuper! version 3.10 and earlier allows a local attacker to execute arbitrary code via the software update mechanism.
Original NVD description (English source)
An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information
Vulnerability data from NVD (NIST) · CISA KEV · EPSS