CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google androidThe NVIDIA MMC test driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to...7.8 High
- google androidThe MediaTek video driver in Android before 2016-10-05 allows attackers to gain privileges via a...7.8 High
- google androidlibril/RilSapSocket.cpp in Telephony in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01...7.8 High
- google androidlibsysutils/src/FrameworkListener.cpp in Framework Listener in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidThe fingerprint login feature in Android 6.0.1 before 2016-10-01 and 7.0 before 2016-10-01 does...7.8 High
- google androidcamera/src/camera_metadata.c in the Camera service in Android 4.x before 4.4.4, 5.0.x before 5.0...7.8 High
- google androidmedia/libmediaplayerservice/MediaPlayerService.cpp in mediaserver in Android 4.x before 4.4.4, 5...7.8 High
- google androidThe framework APIs in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x...7.8 High
- google androidcore/java/android/os/Process.java in Zygote in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1...7.8 High
- google androidservices/soundtrigger/SoundTriggerHwService.cpp in mediaserver in Android 5.0.x before 5.0.2, 5.1...7.8 High
- google androidThe SoftMPEG4 component in libstagefright in mediaserver in Android 4.x before 4.4.4, 5.0.x...7.8 High
- google androidThe Lock Settings Service in Android 6.x before 2016-10-01 and 7.0 before 2016-10-01 allows...5.5 Medium
- google androidCORE/HDD/src/wlan_hdd_main.c in the Qualcomm Wi-Fi driver in Android before 2016-10-05 on Nexus...7.8 High
- google androiddrivers/media/platform/msm/camera_v2/sensor/csid/msm_csid.c in the Qualcomm camera driver in...7.8 High
- google androidcmds/servicemanager/service_manager.c in ServiceManager in Android 5.0.x before 5.0.2, 5.1.x...7.8 High
- google androidMultiple use-after-free vulnerabilities in sound/soc/msm/qdsp6v2/msm-lsm-client.c in the Qualcomm...7.8 High
- linux kernel, google android +1 morearch/arm64/kernel/perf_event.c in the Linux kernel before 4.1 on arm64 platforms allows local...7.3 High
- linux kernel, redhat enterprise mrg, linux +2 moreThe Linux kernel, as used in Red Hat Enterprise Linux 7.2 and Red Hat Enterprise MRG 2 and when...7.4 High
- cisco ios xrCisco IOS XR 6.1.1 allows local users to execute arbitrary OS commands as root by leveraging...7.8 High
- ibm sterling secure proxyThe Configuration Manager in IBM Sterling Secure Proxy (SSP) 3.4.2 before 3.4.2.0 iFix 8 and 3.4...5.9 Medium
- cisco nx-osCisco NX-OS 4.0 through 7.3 on Multilayer Director and Nexus 1000V, 2000, 3000, 3500, 4000, 5000,...8.0 High
- sap netweaverThe (1) SCTC_REFRESH_EXPORT_TAB_COMP, (2) SCTC_REFRESH_CHECK_ENV, and (3) SCTC_TMS_MAINTAIN_ALOG...9.1 Critical
- cisco firesight system softwareCisco FireSIGHT System Software 4.10.3 through 5.4.0 in Firepower Management Center allows remote...6.5 Medium
- beckhoff embedded pc images, twincat, twincat components featuring automation device specification (ads) communication +2 moreBeckhoff Embedded PC Images and TwinCAT Components Exposed Dangerous Method or Function9.1 Critical
- drupalDrupal Unprivileged access to config export4.3 Medium
- drupalDrupal Users without "Administer comments" can set comment visibility on nodes they can edit4.3 Medium
- ibm db2, db2 connect +1 moreUntrusted search path vulnerability in IBM DB2 9.7 through FP11, 10.1 through FP5, 10.5 before...7.3 High
- pivotal software cloud foundry, cloudfoundry cloud foundry uaa bosh, pivotal software cloud foundry elastic runtime +2 more +4 moreThe UAA /oauth/token endpoint in Pivotal Cloud Foundry (PCF) before 243; UAA 2.x before 2.7.4.8,...8.8 High
- gnu gnutlsThe gnutls_ocsp_resp_check_crt function in lib/x509/ocsp.c in GnuTLS before 3.4.15 and 3.5.x...7.5 High
- citrix linux virtual delivery agentCitrix Linux Virtual Delivery Agent (aka VDA, formerly Linux Virtual Desktop) before 1.4.0 allows...7.8 High
- redhat jboss enterprise application platformThe domain controller in Red Hat JBoss Enterprise Application Platform (EAP) 7.x before 7.0.2...8.8 High
- apple tvos, watchos, iphone os +1 more +3 moreThe kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows...7.8 High
- apple tvos, watchos, iphone os +1 more +3 moreThe kernel in Apple iOS before 10, OS X before 10.12, tvOS before 10, and watchOS before 3 allows...7.8 High
- apple mac os xdiskutil in DiskArbitration in Apple OS X before 10.12 allows local users to gain privileges via...7.8 High
- apple mac os xCoreDisplay in Apple OS X before 10.12 allows attackers to view arbitrary users' screens by...5.3 Medium
- cisco application policy infrastructure controllerThe installation procedure on Cisco Application Policy Infrastructure Controller (APIC) devices 1...7.8 High
- cisco email security appliance firmwareCisco IronPort AsyncOS 9.1.2-023, 9.1.2-028, 9.1.2-036, 9.7.2-046, 9.7.2-047, 9.7.2-054, 10.0.0...9.8 Critical
- redhat quickstart cloud installerRed Hat QuickStart Cloud Installer (QCI) uses world-readable permissions for /etc/qci/answers,...8.4 High
- xenXen 4.5.3, 4.6.3, and 4.7.x allow local HVM guest OS administrators to overwrite hypervisor...8.2 High
- hp performance centerHPE Performance Center 11.52, 12.00, 12.01, 12.20, and 12.50 allows remote attackers to bypass...8.3 High
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...6.5 Medium
- emc vnx1 oe firmware, vnx2 oe firmware, vnxe oe firmware +2 moreThe SMB service in EMC VNXe (VNXe3200 Operating Environment prior to 3.1.5.8711957 and VNXe3100...9.8 Critical
- emc avamar serverAvamar Data Store (ADS) and Avamar Virtual Edition (AVE) in EMC Avamar Server before 7.3.0-233...6.7 Medium
- aver eh6108h\+ firmwareThe /setup URI on AVer Information EH6108H+ devices with firmware X9.03.24.00.07l allows remote...9.8 Critical
- cisco unified computing systemUCS Manager and UCS 6200 Fabric Interconnects in Cisco Unified Computing System (UCS) through 3.0...7.8 High
- emc documentum d2EMC Documentum D2 4.5 before patch 15 and 4.6 before patch 03 allows remote attackers to read...5.3 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1,...5.5 Medium
- microsoft windows server 2008, windows vista +1 moreThe kernel API in Microsoft Windows Vista SP2 and Windows Server 2008 SP2 does not properly...6.6 Medium
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe Graphics Device Interface (GDI) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and...7.8 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +1 more +3 moreThe kernel-mode drivers in Microsoft Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1...7.8 High
- Show moreLoading…