CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- linux kernelThe __get_user_asm_ex macro in arch/x86/include/asm/uaccess.h in the Linux kernel 4.4.22 through...7.8 High
- linux kernelThe tipc_msg_build function in net/tipc/msg.c in the Linux kernel through 4.8.11 does not...7.8 High
- google androidAn elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before...7.8 High
- google androidAn elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before...7.8 High
- google androidAn elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before...7.8 High
- google androidAn elevation of privilege vulnerability in the Synaptics touchscreen driver in Android before...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm camera driver in Android before 2016-11...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm crypto engine driver in Android before...7.8 High
- google androidAn elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05...7.8 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05...7.8 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05...7.8 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05...7.8 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05...7.3 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05...7.3 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05...7.3 High
- google androidAn elevation of privilege vulnerability in the NVIDIA GPU driver in Android before 2016-11-05...7.3 High
- google androidAn elevation of privilege vulnerability in the Qualcomm bootloader in Android before 2016-11-05...7.8 High
- google androidAn elevation of privilege vulnerability in the kernel ION subsystem in Android before 2016-11-05...7.8 High
- google androidAn elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before...7.0 High
- google androidAn elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0...7.8 High
- google androidAn elevation of privilege vulnerability in Mediaserver in Android 5.0.x before 5.0.2, 5.1.x...7.8 High
- google androidAn elevation of privilege vulnerability in Mediaserver in Android 4.x before 4.4.4, 5.0.x before...7.8 High
- google androidAn elevation of privilege vulnerability in libzipfile in Android 4.x before 4.4.4, 5.0.x before 5...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm bus driver in Android before 2016-11-05...7.8 High
- ibm sterling connect\IBM Sterling Connect:Direct 4.5.00, 4.5.01, 4.6.0 before 4.6.0.6 iFix008, and 4.7.0 before 4.7.0...4.5 Medium
- ibm tivoli storage manager for virtual environmentsIBM Tivoli Storage Manger for Virtual Environments: Data Protection for VMware (aka Spectrum...8.5 High
- ibm general parallel file system, spectrum scale +1 moreIBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File...7.0 High
- ibm general parallel file system, spectrum scale +1 moreIBM Spectrum Scale 4.1.1.x before 4.1.1.8 and 4.2.x before 4.2.0.4 and General Parallel File...7.0 High
- xen, citrix xenserver +1 moreThe x86 emulator in Xen does not properly treat x86 NULL segments as unusable when accessing...7.8 High
- xen, citrix xenserver +1 moreXen 4.0.x through 4.7.x mishandle x86 task switches to VM86 mode, which allows local 32-bit x86...7.8 High
- linuxcontainers lxclxc-attach in LXC before 1.0.9 and 2.x before 2.0.6 allows an attacker inside of an unprivileged...9.1 Critical
- paloaltonetworks pan-osPalo Alto Networks PAN-OS before 5.0.20, 5.1.x before 5.1.13, 6.0.x before 6.0.15, 6.1.x before 6...7.8 High
- siemens simatic cp 1543-1 firmwareA vulnerability has been identified in SIMATIC CP 1543-1 (All versions < V2.0.28), SIPLUS NET CP...6.6 Medium
- mozilla firefoxWebExtensions can bypass security checks to load privileged URLs and potentially escape the...7.5 High
- mozilla firefoxAn issue where WebExtensions can use the mozAddonManager API to elevate privilege due to...9.8 Critical
- mozilla firefoxA maliciously crafted page loaded to the sidebar through a bookmark can reference a privileged...8.0 High
- teradata studio expressThe installation script studioexpressinstall for Teradata Studio Express 15.12.00.00 creates...7.8 High
- teradata virtual machine community edition, virtual machine +1 moreTeradata Virtual Machine Community Edition v15.10's perl script /opt/teradata/gsctools/bin/t2a.pl...9.8 Critical
- teradata virtual machine community edition, virtual machine +1 moreTeradata Virtual Machine Community Edition v15.10 has insecure file permissions on /etc/luminex...7.8 High
- microsoft win32k, windows 7, windows 8.1 +8 more +10 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- microsoft sql serverMicrosoft SQL Server 2012 SP2 and 2012 SP3 does not properly perform a cast of an unspecified...8.8 High
- microsoft sql serverThe agent in Microsoft SQL Server 2012 SP2, 2012 SP3, 2014 SP1, 2014 SP2, and 2016 does not...8.8 High
- microsoft sql serverMicrosoft SQL Server 2014 SP1, 2014 SP2, and 2016 does not properly perform a cast of an...8.8 High
- microsoft sql serverMicrosoft SQL Server 2016 does not properly perform a cast of an unspecified pointer, which...8.8 High
- microsoft windows 10, windows 7, windows 8.1 +4 more +6 moreThe kernel-mode drivers in Microsoft Windows Server 2008 R2 SP1, Windows 7 SP1, Windows 8.1,...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreMicrosoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1,...7.8 High
- microsoft windows 10, windows server 2016 +1 moreTask Scheduler in Microsoft Windows 10 Gold, 1511, and 1607 and Windows Server 2016 allows local...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreInput Method Editor (IME) in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- Show moreLoading…