CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelThe apparmor_setprocattr function in security/apparmor/lsm.c in the Linux kernel before 4.6.5...7.8 High
- google androiddrivers/video/msm/mdss/mdss_mdp_util.c in the Qualcomm components in Android before 2016-08-05 on...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/pproc/cpp/msm_cpp.c in the Qualcomm components in Android...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android...7.8 High
- google androidInteger overflow in sound/soc/msm/qdsp6v2/q6lsm.c in the Qualcomm components in Android before...7.8 High
- google androiddrivers/video/msm/mdp4_util.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 ...7.8 High
- google androidThe MSM camera driver in the Qualcomm components in Android before 2016-08-05 on Nexus 6 devices...7.8 High
- google androiddrivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices...7.8 High
- google androidOff-by-one error in drivers/media/platform/msm/camera_v2/sensor/cci/msm_cci.c in the Qualcomm...7.8 High
- linux kernelarch/arm/mm/dma-mapping.c in the Linux kernel before 3.13 on ARM platforms, as used in Android...7.8 High
- google androiddrivers/misc/qseecom.c in the Qualcomm components in Android before 2016-08-05 on Nexus 5 and 7 ...7.8 High
- google androidFormat string vulnerability in drivers/thermal/qpnp-adc-tm.c in the Qualcomm components in...7.8 High
- google androiddrivers/media/radio/radio-iris.c in the Qualcomm components in Android before 2016-08-05 on Nexus...7.8 High
- google androiddrivers/video/msm/vidc/common/enc/venc.c in the Qualcomm components in Android before 2016-08-05...7.8 High
- google androidThe mdss mdp3 driver in the Qualcomm components in Android before 2016-08-05 on Nexus 5 devices...7.8 High
- google androiddrivers/mmc/card/mmc_block_test.c in the Qualcomm components in Android before 2016-08-05 on...7.8 High
- google androiddrivers/char/diag/diag_dci.c in the Qualcomm components in Android before 2016-08-05 on Nexus 7 ...7.8 High
- google androidInteger underflow in drivers/char/diag/diag_dci.c in the Qualcomm components in Android before...7.8 High
- google android, linux kernel +1 moreThe Linux kernel before 3.11 on ARM platforms, as used in Android before 2016-08-05 on Nexus 5...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/isp/msm_isp_stats_util.c in the Qualcomm components in...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/sensor/csiphy/msm_csiphy.c in the Qualcomm components in...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/isp/msm_isp_axi_util.c in the Qualcomm components in Android...7.8 High
- linux kernel, google android +1 moreThe IPv6 stack in the Linux kernel before 4.3.3 mishandles options data, which allows local users...7.3 High
- google androidGoogle Play services in Android before 2016-08-05 on Nexus devices allow local users to bypass...5.5 Medium
- google androidThe LG Electronics bootloader Android before 2016-08-05 on Nexus 5X devices allows attackers to...8.1 High
- google androidInteger overflow in app/aboot/aboot.c in the Qualcomm bootloader in Android before 2016-08-05 on...7.3 High
- google androidThe ION driver in Android before 2016-08-05 on Pixel C devices allows attackers to gain...7.8 High
- google androidThe NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain...7.0 High
- google androidThe NVIDIA media driver in Android before 2016-08-05 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe Serial Peripheral Interface driver in Android before 2016-08-05 on Nexus 5X and 6P devices...7.0 High
- google androidThe video driver in the kernel in Android before 2016-08-05 on Nexus 5 devices allows attackers...7.8 High
- google androidmediaserver in Android before 2016-08-05 on Nexus 9 and Pixel C devices allows attackers to gain...7.8 High
- google androidAndroid before 2016-08-05 does not properly restrict code execution in a kernel context, which...7.8 High
- google androidThe Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5X, 6, and 6P devices allows...7.8 High
- google androidConscrypt in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before...9.8 Critical
- google androidThe Shell component in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01...7.8 High
- google androidThe framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x...7.8 High
- google androidThe Qualcomm GPU driver in Android before 2016-08-05 on Nexus 5, 5X, 6, 6P, and 7 (2013) devices...7.8 High
- mozilla firefoxThe Updater in Mozilla Firefox before 48.0 on Windows allows local users to write to arbitrary...4.7 Medium
- google androidThe kernel in Android before 2016-08-05 on Nexus 7 (2013) devices allows attackers to gain...7.8 High
- mozilla firefoxMozilla Firefox before 48.0 does not properly restrict drag-and-drop (aka dataTransfer) actions...8.1 High
- huawei p8 smartphone firmwareBuffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363...7.8 High
- huawei p8 smartphone firmwareBuffer overflow in the Wi-Fi driver in Huawei P8 smartphones with software before GRA-CL00C92B363...7.3 High
- pulsesecure pulse secure desktop, odyssey access client, pulse secure security +1 more +3 morePulse Secure Desktop before 5.2R2 and Pulse Secure Installer Service before 8.2R2 and below for...7.8 High
- paloaltonetworks pan-osPalo Alto Networks PAN-OS before 5.0.19, 5.1.x before 5.1.12, 6.0.x before 6.0.14, 6.1.x before 6...7.8 High
- vtiger crmmodules/Users/actions/Save.php in Vtiger CRM 6.4.0 and earlier does not properly restrict user...8.1 High
- novell filrNovell Filr 1.2 before Hot Patch 6 and 2.0 before Hot Patch 2 uses world-writable permissions for...7.8 High
- perl, apache spamassassin, debian linux +2 more +4 more(1) cpan/Archive-Tar/bin/ptar, (2) cpan/Archive-Tar/bin/ptardiff, (3) cpan/Archive-Tar/bin...7.8 High
- apple mac os xCoreGraphics in Apple OS X before 10.11.6 allows local users to obtain sensitive information from...6.3 Medium
- apple mac os xLogin Window in Apple OS X before 10.11.6 allows attackers to gain privileges via a crafted app...7.8 High
- Show moreLoading…