cleanshot_x vulnerabilities

CVEs whose affected-version data names the cleanshot_x package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-16477High· 8.4

yesterday

Insecure Deserialization of .cleanshot Files in CleanShot X

CleanShot X for macOS insecurely deserializes untrusted data embedded in a .cleanshot project file (editable screenshot annotations). Exploitation requires an attacker to craft a malicious .cleanshot file, deliver it to the target, and h…

▾ TwilightMTW · CleanShot Xvia CVEORG