SZB-c7e34678b5
Shirt Pocket SuperDuper! flaw lets local attacker obtain sensitive information
- Status
- Unverified: only social posts report this so far
- Kind
- Vulnerability
- Vendor
- Shirt Pocket
- Product
- SuperDuper!
- First seen
Summary
The EUVD entry EUVD-2026-111071 describes an issue in SuperDuper! 4.0.9 and earlier that lets a local attacker obtain sensitive information, scored 6.2 under CVSS v3.1. No fixed version is named in the item.
If you use Shirt Pocket
Check the EUVD entry for patch status and a fixed version
Update SuperDuper! to the latest release once the vendor ships a fix
Restrict local access to machines running affected versions
What the sources say 1
· Mastodon: “An issue in Shirt Pocket's SuperDuper! 4.0.9 and earlier allow a local attacker to obtain sensitive information” Source