CVE-2021-40531

Sketch before 75 allows library feeds to be used to bypass file quarantine. Files are automatically downloaded and opened, without the com.apple.quarantine extended attribute. This results in remote code execution, as demonstrated by CommandString in a terminal profile to Terminal.app.

• CWE-434

• https://jonpalmisc.com/2021/11/22/cve-2021-40531Exploit, Third Party Advisory
• https://www.sketch.com/updates/#version-75Patch, Release Notes, Vendor Advisory
• https://jonpalmisc.com/2021/11/22/cve-2021-40531Exploit, Third Party Advisory
• https://www.sketch.com/updates/#version-75Patch, Release Notes, Vendor Advisory

Published

Sep 6, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-40526Incorrect calculation of buffer size vulnerability in Peleto…5.3
• CVE-2021-40527Exposure of senstive information to an unauthorised actor in…7.5
• CVE-2021-40528The ElGamal implementation in Libgcrypt before 1.9.4 allows …5.9
• CVE-2021-40529The ElGamal implementation in Botan through 2.18.1, as used …5.9
• CVE-2021-4053Use after free in UI in Google Chrome on Linux prior to 96.0…8.8
• CVE-2021-40530The ElGamal implementation in Crypto++ through 8.5 allows pl…5.9
• CVE-2021-40532Telegram Web K Alpha before 0.7.2 mishandles the characters …9.8
• CVE-2021-40537Server Side Request Forgery (SSRF) vulnerability exists in o…2.7
• CVE-2021-40539Zoho ManageEngine ADSelfService Plus version 6113 and prior …9.8
• CVE-2021-4054Incorrect security UI in autofill in Google Chrome prior to …6.5
• CVE-2021-40540ulfius_uri_logger in Ulfius HTTP Framework before 2.7.4 omit…9.8
• CVE-2021-40541PHPFusion 9.03.110 is affected by cross-site scripting (XSS)…6.1