CVE-2021-40531

CVE-2021-40531 is a critical remote code execution vulnerability affecting Sketch before version 75 on macOS. It allows attackers to bypass macOS file quarantine by leveraging Sketch's library feeds to automatically download and open malicious files without proper security attributes. With a CVSS score of 9.8 (CRITICAL), this vulnerability poses a significant risk due to its network-based attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. While there is no evidence of active exploitation, public exploit code, or significant community discussion, organizations using affected Sketch versions should prioritize patching to mitigate this severe threat.