CWE-264: Permissions, Privileges, and Access Controls
Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
From the CWE List. © The MITRE Corporation.
Newest
- google android, qualcomm, inc. all qualcomm products +1 moreIn QSEE in all Android releases from CAF using the Linux kernel access control may potentially be...7.8 High
- ibm distributed marketingIBM Distributed Marketing 8.6, 9.0, and 10.0 could allow a privileged authenticated user to...2.7 Low
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Slimbus driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm shared memory driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm crypto driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm LED driver could enable a local malicious...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm sound driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm video driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm video driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm video driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Qualcomm Wi-Fi driver could enable a local...7.0 High
- google androidAn elevation of privilege vulnerability in the MediaTek thermal driver could enable a local...7.0 High
- google androidAn elevation of privilege vulnerability in the MediaTek thermal driver could enable a local...7.0 High
- google androidAn elevation of privilege vulnerability in the MediaTek thermal driver could enable a local...7.0 High
- google android, linux kernel +1 moreAn elevation of privilege vulnerability in the Motorola bootloader could enable a local malicious...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious...7.8 High
- google androidAn elevation of privilege vulnerability in the Qualcomm bootloader could enable a local malicious...7.8 High
- google androidAn elevation of privilege vulnerability in the MediaTek touchscreen driver could enable a local...7.8 High
- broadcom advanced secure gateway, symantec proxysg, symantec corporation advanced secure gateway (asg) and proxysg +2 moreThe Symantec Advanced Secure Gateway (ASG) 6.6 prior to 6.6.5.8, ProxySG 6.5 prior 6.5.10.6,...7.2 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +12 more +14 moreIn F5 BIG-IP 11.2.1, 11.4.0 through 11.6.1, and 12.0.0 through 12.1.2, an unauthenticated user...7.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +8 more +10 moreIn F5 BIG-IP 12.0.0 through 12.1.2, an authenticated attacker may be able to cause an escalation...8.8 High
- broadcom fabric operating system, brocade communications systems, inc. fibre channel san products running brocade fabric os (fos). +1 moreA privilege escalation vulnerability in Brocade Fibre Channel SAN products running Brocade Fabric...8.8 High
- cisco iosA vulnerability in Cisco IOS 15.5(3)M Software for Cisco CallManager Express (CME) could allow an...5.3 Medium
- cisco small business rv series router firmwareA vulnerability in the remote management access control list (ACL) feature of the Cisco CVR100W...5.8 Medium
- linux kernel, google android +1 morekernel/events/core.c in the Linux kernel before 3.19 mishandles counter grouping, which allows...7.8 High
- trendmicro threat discovery appliancelog_query_system.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows...8.8 High
- trendmicro threat discovery appliancelog_query.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote...8.8 High
- trendmicro threat discovery appliancelog_query_dlp.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote...8.8 High
- trendmicro threat discovery appliancelog_query_dae.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote...8.8 High
- trendmicro threat discovery appliancedetected_potential_files.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier...8.8 High
- trendmicro threat discovery applianceadmin_sys_time.cgi in Trend Micro Threat Discovery Appliance 2.6.1062r1 and earlier allows remote...8.8 High
- lshell project lshelllshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute...9.9 Critical
- lshell project lshelllshell 0.9.16 allows remote authenticated users to break out of a limited shell and execute...9.9 Critical
- kallitheaKallithea before 0.3.2 allows remote authenticated users to edit or delete open pull requests or...6.5 Medium
- lenovo system updateLenovo System Update (formerly ThinkVantage System Update) before 5.07.0019 allows local users to...7.8 High
- cygwinCygwin before 2.5.0 does not properly handle updating permissions when changing users, which...9.8 Critical
- phusion passengerPhusion Passenger uses a known /tmp filename7.8 High
- google androidThe Qualcomm GPS subsystem in Android on Android One devices allows remote attackers to execute...9.8 Critical
- fedoraproject fedora, mock project scm plugin +1 moreThe scm plug-in in mock might allow attackers to bypass the intended chroot protection mechanism...7.8 High
- zohocorp servicedesk plusZOHO ManageEngine ServiceDesk Plus before 9.0 allows remote authenticated guest users to have...8.8 High
- redhat subscription-manager, enterprise linux desktop, enterprise linux hpc node +2 more +4 moreThe Subscription Manager package (aka subscription-manager) before 1.17.7-1 for Candlepin uses...3.3 Low
- google androidmediaserver in Android 4.0.3 through 5.x before 5.1 allows attackers to gain privileges. NOTE:...9.8 Critical
- google androidmediaserver in Android 2.2 through 5.x before 5.1 allows attackers to gain privileges. NOTE:...9.8 Critical
- firejail project firejailFirejail allows --chroot when seccomp is not supported, which might allow local users to gain...7.8 High
- firejail project firejailFirejail does not properly clean environment variables, which allows local users to gain privileges.7.8 High
- firejail project firejailFirejail uses weak permissions for /dev/shm/firejail and possibly other files, which allows local...7.8 High
- firejail project firejailFirejail uses 0777 permissions when mounting (1) /dev, (2) /dev/shm, (3) /var/tmp, or (4) /var...7.8 High
- firejail project firejailFirejail uses 0777 permissions when mounting /tmp, which allows local users to gain privileges.7.8 High
- firejail project firejailFirejail allows local users to truncate /etc/resolv.conf via a chroot command to /.3.3 Low
- firejail project firejailFirejail does not restrict access to --tmpfs, which allows local users to gain privileges, as...7.8 High
- Show moreLoading…