CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- linux kernelAn elevation of privilege vulnerability in the NVIDIA GPU driver could enable a local malicious...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious...7.8 High
- google androidAn elevation of privilege vulnerability in the MediaTek I2C driver could enable a local malicious...7.0 High
- google androidAn elevation of privilege vulnerability in Wi-Fi could enable a local malicious application to...7.8 High
- google androidAn elevation of privilege vulnerability in the libziparchive library could enable a local...7.8 High
- splunkSplunk Web in Splunk Enterprise 5.0.x before 5.0.17, 6.0.x before 6.0.13, 6.1.x before 6.1.12, 6...9.8 Critical
- emc scaleioAn issue was discovered in EMC ScaleIO versions before 2.0.1.1. A low-privileged local attacker...8.8 High
- mcafee security information and event managementAuthentication bypass vulnerability in Enterprise Security Manager (ESM) and License Manager (LM)...4.4 Medium
- dotclearDotclear before 2.10.3, when the Host header is not part of the web server routing process,...3.7 Low
- netgear arlo base station firmware, arlo q camera firmware, arlo q plus camera firmware +2 moreNETGEAR Arlo base stations with firmware 1.7.5_6178 and earlier, Arlo Q devices with firmware 1.8...8.1 High
- openbsd opensshsshd in OpenSSH before 7.4, when privilege separation is not used, creates forwarded Unix-domain...7.0 High
- linux kernelUse-after-free vulnerability in the kvm_ioctl_create_device function in virt/kvm/kvm_main.c in...9.8 Critical
- vmware vrealize operationsThe Suite REST API in VMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote...8.5 High
- vmware vrealize operationsVMware vRealize Operations (aka vROps) 6.x before 6.4.0 allows remote authenticated users to gain...10.0 Critical
- vmware workstation player, workstation pro +1 moreThe installer in VMware Workstation Pro 12.x before 12.5.0 and VMware Workstation Player 12.x...7.8 High
- hp thinproHP ThinPro 4.4 through 6.1 mishandles the keyboard layout control panel and virtual keyboard...7.8 High
- linux kernelkernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks...7.0 High
- linux kernelkernel/events/core.c in the performance subsystem in the Linux kernel before 4.0 mismanages locks...7.0 High
- wampserver** DISPUTED ** WampServer 3.0.6 has two files called 'wampmanager.exe' and 'unins000.exe' with a...7.5 High
- wampserver** DISPUTED ** WampServer 3.0.6 installs two services called 'wampapache' and 'wampmysqld' with...7.5 High
- cisco cloudcenter orchestratorA vulnerability in the Docker Engine configuration of Cisco CloudCenter Orchestrator (CCO;...9.8 Critical
- sprecher-automation sprecon-e service programAn issue was discovered in Sprecher Automation SPRECON-E Service Program before 3.43 SP0. Under...7.5 High
- xenXen through 4.8.x allows local 64-bit x86 HVM guest OS users to gain privileges by leveraging...7.8 High
- microsoft officeMicrosoft Office 2010 SP2, 2013 SP1, 2013 RT SP1, and 2016 mishandles library loading, which...7.8 High
- microsoft windows 10, windows server 2016 +1 moreThe Secure Kernel Mode implementation in Microsoft Windows 10 Gold, 1511, and 1607 and Windows...7.8 High
- microsoft windows 10, windows 7, windows 8.1 +5 more +7 moreThe kernel-mode drivers in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1,...7.8 High
- sambaSamba version 4.0.0 up to 4.5.2 is vulnerable to privilege elevation due to incorrect handling of...6.5 Medium
- joomla joomla\!An issue was discovered in templates/beez3/html/com_content/article/default.php in Joomla! before...7.5 High
- nagiosbase/logging.c in Nagios Core before 4.2.4 allows local users with access to an account in the...7.8 High
- cisco ios xrA vulnerability in Cisco IOS XR Software could allow an authenticated, local attacker to log in...7.8 High
- cisco anyconnect secure mobility clientA vulnerability in Cisco AnyConnect Secure Mobility Client for Windows could allow an...7.8 High
- cisco hybrid media serviceA vulnerability in the installation procedure of the Cisco Hybrid Media Service could allow an...7.8 High
- cisco fireamp connector endpoint softwareA vulnerability in the system management of certain FireAMP system processes in Cisco FireAMP...7.8 High
- google androidAn elevation of privilege vulnerability in libstagefright in Mediaserver in Android 7.0 before...7.8 High
- intel graphics driverThe igdkmd64 module in the Intel Graphics Driver through 15.33.42.435, 15.36.x through 15.36.30...7.8 High
- phpmyadminAn issue was discovered in phpMyAdmin. It is possible to bypass AllowRoot restriction ($cfg[...9.8 Critical
- linux kernelRace condition in the ion_ioctl function in drivers/staging/android/ion/ion.c in the Linux kernel...7.8 High
- intel nuc kits, canyon bios, citry bios +2 more +4 moreSMM call out in all Intel Branded NUC Kits allows a local privileged user to access the System...6.7 Medium
- intel wireless bluetooth driversUnquoted service path vulnerability in Intel Wireless Bluetooth Drivers 16.x, 17.x, and before 18...7.8 High
- linux kernel, google android +1 morearch/arm64/kernel/sys.c in the Linux kernel before 4.0 allows local users to bypass the "strict...7.8 High
- linux kernelarch/arm/kernel/sys_oabi-compat.c in the Linux kernel before 4.4 allows local users to gain...7.8 High
- citrix xenserverThe (1) ioport_read and (2) ioport_write functions in Xen, when qemu is used as a device model...7.5 High
- alcatel-lucent omnivista 8770 network management systemAlcatel-Lucent OmniVista 8770 2.0 through 3.0 exposes different ORBs interfaces, which can be...9.8 Critical
- bmc patrolIn BMC Patrol before 9.13.10.02, the binary "listguests64" is configured with the setuid bit....7.8 High
- apache tomcat, canonical ubuntu linux, debian linux +2 moreThe postrm script in the tomcat6 package before 6.0.45+dfsg-1~deb7u3 on Debian wheezy, before 6.0...7.8 High
- ibm tririga application platformThe notifications component in IBM TRIRIGA Applications 10.4 and 10.5 before 10.5.1 allows remote...8.8 High
- ibm qradar security information and event managerIBM QRadar SIEM 7.1 before MR2 Patch 13 and 7.2 before 7.2.7 executes unspecified processes at an...7.5 High
- Show moreLoading…