https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-0336.htmlhttps://patchthecve.com/cve/CVE-2007-0336.htmlTue, 16 Jun 2026 22:35:22 +0000MEDIUM 4.4: Undercover.app/Contents/Resources/uc in Rixstep Undercover allows local users to overwrite arbitrary files, probably related to a race condition.https://patchthecve.com/cve/CVE-2006-0641.htmlhttps://patchthecve.com/cve/CVE-2006-0641.htmlTue, 16 Jun 2026 22:20:59 +0000LOW 2.6: Orbicule Undercover uses a third-party web server to determine the IP address through which the computer is accessing the Internet, but does not document this third-party disclosure, which leads to a potential privacy leak that might allow transmission of sensitive information to an unintended remothttps://patchthecve.com/cve/CVE-2006-0640.htmlhttps://patchthecve.com/cve/CVE-2006-0640.htmlTue, 16 Jun 2026 22:20:59 +0000LOW 2.1: Orbicule Undercover allows attackers with physical or root access to disable the protection by using the chmod command to change the permissions of the /private/etc/uc.app/Contents/MacOS/uc file, which prevents the service from being started in LaunchDaemon.