CVE-2019-13014

Little Snitch versions 4.4.0 fixes a vulnerability in a privileged helper tool. However, the operating system may have made a copy of the privileged helper which is not removed or updated immediately. Computers may therefore still be vulnerable after upgrading to 4.4.0. Version 4.4.1 fixes this issue by removing the operating system's copy during the upgrade.

• CWE-264
• CWE-459

• https://obdev.at/cve/2019-13014-MzE24Ify4p.html
• https://obdev.at/cve/2019-13014-MzE24Ify4p.html

Published

Aug 23, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-13009An issue was discovered in GitLab Community and Enterprise E…6.5
• CVE-2019-1301A denial of service vulnerability exists when .NET Core impr…7.5
• CVE-2019-13010An issue was discovered in GitLab Enterprise Edition 8.3 thr…5.9
• CVE-2019-13011An issue was discovered in GitLab Enterprise Edition 8.11.0 …4.3
• CVE-2019-13012The keyfile settings backend in GNOME GLib (aka glib2.0) bef…
• CVE-2019-13013Little Snitch versions 4.3.0 to 4.3.2 have a local privilege…5.5
• CVE-2019-1302An elevation of privilege vulnerability exists when a ASP.NE…8.8
• CVE-2019-13020The fetch API in Tightrope Media Carousel before 7.1.3 has C…
• CVE-2019-13021The administrative passwords for all versions of Bond JetSel…6.5
• CVE-2019-13022Bond JetSelect (all versions) has an issue in the Java class…9.8
• CVE-2019-13023An issue was discovered in all versions of Bond JetSelect. W…6.5
• CVE-2019-13024Centreon 18.x before 18.10.6, 19.x before 19.04.3, and Centr…