CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft windows 10Microsoft Windows 10 Gold, 1511, and 1607 does not properly enforce permissions, which allows...7.8 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +1 more +3 moreMicrosoft Windows 8.1, Windows Server 2012 R2, Windows RT 8.1, and Windows 10 Gold, 1511, and...6.3 Medium
- cisco firesight system softwareSession fixation vulnerability in Cisco Firepower Management Center and Cisco FireSIGHT System...9.1 Critical
- mariadb, oracle mysql, percona server +9 more +11 moreOracle MySQL through 5.5.52, 5.6.x through 5.6.33, and 5.7.x through 5.7.15; MariaDB before 5.5...9.8 Critical
- google androidThe Java Debug Wire Protocol (JDWP) implementation in adb/sockets.cpp in Android 4.x before 4.4.4...7.0 High
- google androidAndroid 6.x before 2016-09-01 and 7.0 before 2016-09-01 allows physically proximate attackers to...6.8 Medium
- google androidinternal/telephony/SMSDispatcher.java in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x...2.1 Low
- google androidproviders/settings/SettingsProvider.java in Android 7.0 before 2016-09-01 does not properly...7.8 High
- google androidsystemui/statusbar/phone/QuickStatusBarHeader.java in the System UI Tuner in Android 7.0 before...6.8 Medium
- google androiddebuggerd/debuggerd.cpp in Debuggerd in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x...7.8 High
- google androidproviders/settings/SettingsProvider.java in Android 6.x before 2016-09-01 and 7.0 before 2016-09...6.8 Medium
- google androidserver/wm/WindowManagerService.java in Android 6.x before 2016-09-01 does not enforce the...6.8 Medium
- google androidCORE/HDD/src/wlan_hdd_wext.c in the Qualcomm Wi-Fi driver in Android before 2016-09-05 on Nexus...7.8 High
- google androidThe NVIDIA kernel in Android before 2016-09-05 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidMultiple buffer overflows in codecs/mp3dec/SoftMP3.cpp in libstagefright in mediaserver in...7.8 High
- google androidomx/SimpleSoftOMXComponent.cpp in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0...7.8 High
- google androidThe Broadcom Wi-Fi driver in Android before 2016-09-05 on Nexus 5, Nexus 6, Nexus 6P, Nexus 9,...7.8 High
- google androidThe Qualcomm power driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows...7.8 High
- google androidThe Qualcomm IPA driver in Android before 2016-09-05 on Nexus 5X and 6P devices allows attackers...7.8 High
- google androidThe Qualcomm sound driver in Android before 2016-09-05 on Nexus 5X, 6, and 6P devices allows...7.8 High
- google androidThe Synaptics touchscreen driver in Android before 2016-09-05 on Nexus 5X and 9 devices allows...7.8 High
- google androidThe Qualcomm radio interface layer in Android before 2016-09-05 on Nexus 5, Nexus 5X, Nexus 6,...7.8 High
- google androidLibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09...7.8 High
- google androidThe Qualcomm camera driver in Android before 2016-09-05 on Nexus 5, 5X, 6, and 6P devices allows...7.8 High
- mod nss project nssThe NSSCipherSuite option with ciphersuites enabled in mod_nss before 1.0.12 allows remote...9.8 Critical
- fortinet fortiswitchFortinet FortiSwitch FSW-108D-POE, FSW-124D, FSW-124D-POE, FSW-224D-POE, FSW-224D-FPOE, FSW-248D...9.8 Critical
- hp xp7 command viewHPE XP7 Command View Advanced Edition (CVAE) Suite 6.x through 8.x before 8.4.1-02, when...4.5 Medium
- inspircd, debian linux +1 moreThe m_sasl module in InspIRCd before 2.0.23, when used with a service that supports SASL_EXTERNAL...5.9 Medium
- xenThe get_page_from_l3e function in arch/x86/mm.c in Xen allows local 32-bit PV guest OS...8.2 High
- redhat jboss operations networkThe web console in Red Hat JBoss Operations Network (JON) before 3.3.7 does not properly...8.8 High
- cisco anyconnect secure mobility clientCisco AnyConnect Secure Mobility Client before 4.2.05015 and 4.3.x before 4.3.02039 mishandles...7.8 High
- apple ios, iphone os +1 moreThe kernel in Apple iOS before 9.3.5 allows attackers to execute arbitrary code in a privileged...7.8 High
- watchguard rapidstreamWatchGuard RapidStream appliances allow local users to gain privileges and execute arbitrary...7.8 High
- cisco aironet access point softwareCisco Aironet 1800, 2800, and 3800 devices with software before 8.2.110.0, 8.2.12x before 8.2.121...7.8 High
- emc authentication manager primeThe Self-Service Portal in EMC RSA Authentication Manager (AM) Prime Self-Service 3.0 and 3.1...8.1 High
- f5 big-ip edge gateway, big-ip access policy manager, big-ip advanced firewall manager +11 more +13 moreThe Configuration utility in F5 BIG-IP LTM, Analytics, APM, ASM, GTM, and Link Controller 11.x...7.5 High
- apple iphone osIOMobileFrameBuffer in Apple iOS before 9.3.4 allows attackers to execute arbitrary code in a...7.8 High
- cisco secure firewall management centerThe web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.0.3, 5.3.1.x before...8.8 High
- cisco secure firewall management centerThe web-based GUI in Cisco Firepower Management Center 4.x and 5.x before 5.3.1.2 and 5.4.x...8.8 High
- sap sapcar archive toolSAP SAPCAR allows local users to change the permissions of arbitrary files and consequently gain...5.8 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft windows, windows 7, windows 8.1 +7 more +9 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1;...7.8 High
- microsoft windows 8.1, windows rt 8.1, windows server 2012 +2 moreThe Netlogon service in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT 8...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreKerberos in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and R2 SP1; Windows 7 SP1;...7.5 High
- ibm sterling connect\IBM Sterling Connect:Direct for Unix 4.1.0 before 4.1.0.4 iFix073 and 4.2.0 before 4.2.0.4...3.3 Low
- siemens sinema serverSiemens SINEMA Server uses weak permissions for the application folder, which allows local users...7.8 High
- google chromeThe Developer Tools (aka DevTools) subsystem in Blink, as used in Google Chrome before 52.0.2743...9.8 Critical
- Show moreLoading…