Skip to content

Vulnerability Check Report

Choose a tag to compare

View all tags
@macvfx macvfx released this 05 Jun 19:01
· 15 commits to main since this release
2.9+4
fdb7d61
This commit was created on GitHub.com and signed with GitHub’s verified signature.
GPG key ID: B5690EEEBB952194
Verified
Learn about vigilant mode.

v2.9 (Build 4) — Vulnerability Check, CVE Tracking & Smart Update Recommendations

New: Vulnerability Check Report

  • New report in the Reports tab showing CVEs fixed per macOS release, sourced from the SOFA feed
  • Shows total CVEs fixed (purple) and actively exploited CVEs (red) per release
  • Expand any release to see individual CVE IDs, with actively exploited ones highlighted
  • "Missing Fixes" section shows exactly which CVEs a device is exposed to when running an older version
  • Links to Apple Security Notes for each release
  • Default view shows only versions installed on your devices, with a "Show All Releases" toggle
  • Grouped by major OS version (newest first) with "Latest" badges
  • Exportable to CSV for client compliance reporting

New: Unfixed CVE Tracking

  • New "Unfixed CVEs" column in the Devices tab showing how many CVEs are unpatched per device
  • Color-coded: green (0), orange (some), red (100+)
  • Unfixed CVE count shown in Security Report summary bar and per-device issue rows
  • Included in Security Report CSV export

New: Copy Device Info

  • Right-click any device row to copy a one-line summary to clipboard
  • Includes name, serial, product, OS version, upgrade recommendations, unfixed CVE count, and FV/SIP/FW status
  • Example: Your MacBook Pro — Serial: C02X1234 — Mac16,1 — macOS 15.7.5 — recommend upgrading to macOS 26.5.1 — 45 unfixed CVEs — FV: on | SIP: on | FW: on

Improved: Smart Update Recommendations

  • Security Report now recommends actively supported macOS versions (15 and 26) instead of EOL releases
  • Devices on macOS 13 or 14 show "Update to macOS 26 (Tahoe)" rather than "Minor OS update needed"
  • Copy Device Info only suggests actively supported versions, never EOL releases like 13.7.8 or 14.8.7

Improved: Need Updates Report

  • Renamed from "Devices Needing Updates"
  • Shows upgrade paths with color-coded versions: red (current) → orange (intermediate, e.g., macOS 15) → green (latest, e.g., macOS 26)
  • Only recommends the two actively supported major macOS versions

Improved: OS Version Badge Colours

  • Four-tier system in the Devices tab replacing the old three-tier:
    • Green: up to date
    • Yellow: one patch behind (e.g., 26.5 → 26.5.1)
    • Orange: multiple versions behind within same major
    • Red: on an older major OS entirely

Other

  • SOFA feed caching now stores the raw API response, preserving full SecurityReleases and CVE data
  • Updated demo mode data with macOS 26.x versions, newer Mac models (M3/M4), and broader version spread for better feature demonstration
Assets 3
Loading