CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft windows 7, windows server 2008, windows vista +2 moreThe kernel API in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, and Windows 7...5.5 Medium
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, and GeForce products, NVIDIA Windows GPU Display Driver R340 before...7.8 High
- cisco ip interoperability and collaboration systemA vulnerability in the command-line interface of the Cisco IP Interoperability and Collaboration...7.8 High
- nvidia gpu driverFor the NVIDIA Quadro, NVS, GeForce, and Tesla products, NVIDIA GPU Display Driver on Linux R304...7.8 High
- sybase adaptive server enterpriseSAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases...9.8 Critical
- djangoproject django, canonical ubuntu linux, fedoraproject fedora +2 moreDjango DNS Rebinding Vulnerability8.1 High
- dockerRed Hat Security Advisory: docker security update7.5 High
- dotcmsIn dotCMS 3.2.1, attacker can load captcha once, fill it with correct value and then this correct...7.5 High
- cisco ios xeA vulnerability in Cisco IOS XE Software running on Cisco cBR-8 Converged Broadband Routers could...5.9 Medium
- yandex browserSecurity WiFi bypass in Yandex Browser from version 15.10 to 15.12 allows remote attacker to...5.3 Medium
- oracle mysqlUnspecified vulnerability in Oracle MySQL 5.7.13 and earlier allows local users to affect...4.7 Medium
- oracle databaseUnspecified vulnerability in the Kernel PDB component in Oracle Database Server 12.1.0.2 allows...6.4 Medium
- oracle database serverUnspecified vulnerability in the RDBMS Security component in Oracle Database Server 11.2.0.4 and...3.3 Low
- oracle jdk, jre +1 moreUnspecified vulnerability in Oracle Java SE 6u121, 7u111, 8u102; and Java SE Embedded 8u101...8.3 High
- ibm security guardium database activity monitorIBM Security Guardium Database Activity Monitor 9.x through 9.5 before p700 and 10.x through 10.0...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.3 High
- microsoft windows 10The Standard Collector Service in Windows Diagnostics Hub in Microsoft Windows 10 Gold, 1511, and...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft live meeting, lync, office +9 more +11 moreGraphics Device Interface (aka GDI or GDI+) in Microsoft Windows Vista SP2; Windows Server 2008...7.8 High
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to...5.3 Medium
- microsoft edge, internet explorer +1 moreMicrosoft Internet Explorer 10 and 11 and Microsoft Edge do not properly restrict access to...7.5 High
- microsoft windows 10, windows 8.1, windows rt 8.1 +1 more +3 moreThe kernel-mode drivers in Transaction Manager in Microsoft Windows 8.1, Windows Server 2012 Gold...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe Graphics component in the kernel in Microsoft Windows Vista SP2; Windows Server 2008 SP2 and...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- apache tomcatThe Tomcat package on Red Hat Enterprise Linux (RHEL) 5 through 7, JBoss Web Server 3.0, and...7.8 High
- x.org libxfixes, fedoraproject fedora +1 moreInteger overflow in X.org libXfixes before 5.0.3 on 32-bit platforms might allow remote X servers...9.8 Critical
- x.org libx11, fedoraproject fedora +1 moreThe XGetImage function in X.org libX11 before 1.6.4 might allow remote X servers to gain...9.8 Critical
- intel solid-state drive toolboxThe updater subsystem in Intel SSD Toolbox before 3.3.7 allows local users to gain privileges via...7.8 High
- google androidThe NVIDIA camera driver in Android before 2016-10-05 on Nexus 9 devices allows attackers to gain...7.8 High
- google androidThe Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 5X devices allows...7.8 High
- google androidThe Synaptics touchscreen driver in Android before 2016-10-05 on Nexus 6P and Android One devices...7.8 High
- google androiddrivers/video/msm/mdss/mdss_debug.c in the Qualcomm video driver in Android before 2016-10-05 on...7.8 High
- google androiddrivers/video/msm/mdss/mdss_mdp_overlay.c in the Qualcomm video driver in Android before 2016-10...7.8 High
- google androidmediaserver in Android before 2016-10-05 on Nexus 9 and Pixel C devices allows attackers to gain...7.8 High
- google androidmediaserver in Android before 2016-10-05 allows attackers to gain privileges via a crafted...7.8 High
- google androiddrivers/misc/qseecom.c in the Qualcomm QSEE Communicator driver in Android before 2016-10-05 on...7.8 High
- Show moreLoading…