CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google androidThe Qualcomm buspm driver in Android before 2016-05-01 on Nexus 5X, 6, and 6P devices allows...7.0 High
- google androidlibs/binder/IPCThreadState.cpp in Binder in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...7.8 High
- google androidThe NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe NVIDIA video driver in Android before 2016-05-01 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 6 and Android One devices...7.8 High
- google androidThe Qualcomm TrustZone component in Android before 2016-05-01 on Nexus 5, Nexus 6, Nexus 7 (2013)...7.8 High
- google androidlibbacktrace/Backtrace.cpp in debuggerd in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...7.8 High
- google androidserver/TetherController.cpp in the tethering controller in netd, as distributed with Qualcomm...7.8 High
- accellion file transfer applianceThe Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows local users to add an SSH...7.8 High
- accellion file transfer applianceThe Accellion File Transfer Appliance (FTA) before FTA_9_12_40 allows remote authenticated users...8.8 High
- mcafee virusscan enterprise, microsoft windows +1 moreThe McAfee VirusScan Console (mcconsol.exe) in McAfee VirusScan Enterprise 8.8.0 before Hotfix...3.0 Low
- imagemagick, canonical ubuntu linux, redhat enterprise linux desktop +7 more +9 moreThe MSL coder in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allows remote attackers to...3.3 Low
- linux kernelnet/socket.c in the Linux kernel 3.19 before 3.19.3 does not validate certain range data for (1)...7.8 High
- mozilla firefoxMozilla Firefox before 46.0 on Android before 5.0 allows attackers to bypass intended Signature...5.0 Medium
- mozilla firefoxThe Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 on Windows allows user...5.5 Medium
- canonical ubuntu-core-launcherThe setup_snappy_os_mounts function in the ubuntu-core-launcher package before 1.0.27.1...9.8 Critical
- cisco application policy infrastructure controller enterprise moduleThe API in Cisco Application Policy Infrastructure Controller Enterprise Module (APIC-EM) 1.0(1)...7.5 High
- mozilla firefoxThe WebExtension sandbox feature in browser/components/extensions/ext-tabs.js in Mozilla Firefox...5.4 Medium
- docker, linuxfoundation runc, opensuse +2 morePrivilege Elevation in runc7.8 High
- accuenergy acuvim ii net firmware, acuvim iir net firmware +1 moreThe AXM-NET module in Accuenergy Acuvim II NET Firmware 3.08 and Acuvim IIR NET Firmware 3.08...8.6 High
- symantec altiris it management suiteThe Inventory Solution component in the Management Agent in the client in Symantec Altiris IT...5.5 Medium
- cisco ios, ios xe +1 moreThe NTP implementation in Cisco IOS 15.1 and 15.5 and IOS XE 3.2 through 3.17 allows remote...7.5 High
- opensusetmpfiles.d/systemd.conf in systemd before 229 uses weak permissions for /var/log/journal/%m...3.3 Low
- opensusetmpfiles.d/systemd.conf in systemd before 214 uses weak permissions for journal files under (1) ...3.3 Low
- xen, fedoraproject fedora, oracle vm server +2 moreInteger overflow in the x86 shadow pagetable code in Xen allows local guest OS users to cause a...8.8 High
- opensuse, opensuse leap +1 moreThe quagga package before 0.99.23-2.6.1 in openSUSE and SUSE Linux Enterprise Server 11 SP 1 uses...5.5 Medium
- google androidserver/telecom/CallsManager.java in Telephony in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5...6.1 Medium
- google androidWi-Fi in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04...7.8 High
- google androidSetup Wizard in Android 5.1.x before 5.1.1 and 6.x before 2016-04-01 allows physically proximate...6.1 Medium
- google androidrootdir/init.rc in Android 4.x before 4.4.4 does not ensure that the /data/tombstones directory...7.8 High
- google androidmedia/libmedia/IDrm.cpp in mediaserver in Android 6.x before 2016-04-01 does not initialize a...9.8 Critical
- google androidmedia/libmedia/IOMX.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...9.8 Critical
- google androidlibs/gui/BufferQueueConsumer.cpp in mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2,...9.8 Critical
- google androidmedia/libmedia/IOMX.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x...7.8 High
- google androidinclude/core/SkPostConfig.h in Skia, as used in System_server in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidA Qualcomm video kernel driver in Android 6.x before 2016-04-01 allows attackers to gain...7.4 High
- google androidA Texas Instruments (TI) haptic kernel driver in Android 6.x before 2016-04-01 allows attackers...8.1 High
- google androidThe PORCHE_PAIRING_CONFLICT feature in Bluetooth in Android 4.x before 4.4.4, 5.0.x before 5.0.2,...8.8 High
- google androidThe Telecom Component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04...8.4 High
- google androidlibs/binder/IMemory.cpp in the IMemory Native Interface in Android 4.x before 4.4.4, 5.0.x before...8.4 High
- google androidThe Qualcomm RF driver in Android 6.x before 2016-04-01 does not properly restrict access to...8.4 High
- google androidThe Qualcomm ARM processor performance-event manager in Android 4.x before 4.4.4, 5.0.x before 5...8.4 High
- juniper junosRace condition in the Op command in Juniper Junos OS before 12.1X44-D55, 12.1X46 before 12.1X46...8.8 High
- openbsd openssh, canonical ubuntu core, ubuntu linux +2 more +4 moreThe do_setup_env function in session.c in sshd in OpenSSH through 7.2p2, when the UseLogin...7.8 High
- huawei fusioncomputeHuawei FusionCompute with software before V100R005C10SPC700 allows remote authenticated users to...4.3 Medium
- microsoft win32k, windows 7, windows 8.1 +6 more +8 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft win32k, windows 7, windows 8.1 +6 more +8 moreThe kernel-mode driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft client-server run-time subsystem (csrss), windows 8.1, windows rt 8.1 +3 more +5 moreThe Client-Server Run-time Subsystem (CSRSS) in Microsoft Windows 8.1, Windows Server 2012 Gold...7.8 High
- Show moreLoading…