CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- microworld escan antivirus, escanav escan anti-virus +1 moreMicroWorld eScan Antivirus Installation var default permission4.8 Medium
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the window management module Impact: Successful...7.8 High
- huawei emui, harmonyos +1 morePermission control vulnerability in the Connectivity module Impact: Successful exploitation of...6.2 Medium
- huawei emui, harmonyos +1 moreVulnerability of improper permission control in the Gallery module Impact: Successful...4.4 Medium
- eyesofnetworkAn issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be...9.8 Critical
- inspur clusterengineAn issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated...8.4 High
- google androidIn checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to...7.8 High
- google androidIn onCreate of NotificationAccessConfirmationActivity.java , there is a possible way to hide an...7.8 High
- google androidIn applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to...7.8 High
- google androidIn onClick of MainClear.java, there is a possible way to trigger factory reset without explicit...5.5 Medium
- google androidIn multiple locations, there is a possible failure to persist permissions settings due to...7.8 High
- google androidIn multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant...7.8 High
- google androidIn multiple functions of AccountManagerService.java, there is a possible way to bypass...7.0 High
- google androidIn multiple locations, there is a possible way to obtain access to a folder due to a tapjacking...7.8 High
- google androidIn multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs...7.8 High
- huawei harmonyosSome Huawei wearables have a permission management vulnerability.7.7 High
- eugeny tabbyTabby has a TCC Bypass via Unnecessary Permissive Entitlements in Tabby8.6 High
- biamp evoko home serviceIncorrect default permissions in Biamp Evoko Home7.8 High
- edgecross consortium basic software for developers, basic software for windows +1 moreIncorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00...7.8 High
- No product listedKeyfactor Command before 12.5.0 has Incorrect Access Control: access tokens are over permissioned...7.6 High
- broadcom ca client automation (itcm)Improper Privilege Management Vulnerability in CA Client Automation 14.57.3 High
- surrealdbSurrealDB before 2.1.4 Permission Bypass via DEFINE TABLE OVERWRITE2.3 Low
- cleo harmony, lexicom, vltrader +1 more +3 moreIn Cleo Harmony before 5.8.0.24, VLTrader before 5.8.0.24, and LexiCom before 5.8.0.24, an...9.8 Critical
- open design alliance cde inweb sdkExposure of Sensitive Information to an Unauthorized Actor vulnerability in ODA CDE inWEB SDK before 2025.36.9 Medium
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- epic games launcherEpic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability7.8 High
- ivanti application controlUnder specific circumstances, insecure permissions in Ivanti Application Control before version...7.8 High
- ivanti performance managerUnder specific circumstances, insecure permissions in Ivanti Performance Manager before version...7.8 High
- ivanti workspace controlUnder specific circumstances, insecure permissions in Ivanti Workspace Control before version 10...7.8 High
- ivanti automationUnder specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1...7.8 High
- ivanti security controlsUnder specific circumstances, insecure permissions in Ivanti Security Controls before version...7.8 High
- No product listedCOMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc...9.8 Critical
- No product listedAn issue was discovered in MSA Safety FieldServer Gateways and Embedded Modules with build...9.8 Critical
- wavlink wn531p3 firmwareWAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc...9.8 Critical
- wavlink wn701ae firmwareWAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in ...9.8 Critical
- kolide launcherKolide Agent Privilege Escalation (Windows, Versions >= 1.5.3, < 1.12.3)7.3 High
- samsung magicianAn issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can...2.8 Low
- infodom performa 365An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their...8.8 High
- google androidIn OSUInfo of OSUInfo.java, there is a possible escalation of privilege due to improper input...7.8 High
- ever traduoraEver Traduora 0.20.0 and below is vulnerable to Privilege Escalation due to the use of a hard...8.8 High
- google androidIn startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused...7.8 High
- google androidthere is a possible biometric bypass due to an unusual root cause. This could lead to local...7.8 High
- google androidthere is a possible biometric bypass due to an unusual root cause. This could lead to local...7.8 High
- google androidIn isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could...7.8 High
- google androidthere is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to...7.8 High
- cradlepoint netcloud exchange client, netcloud exhange client +1 moreIncorrect default permissions in Cradlepoint NetCloud Exchange8.8 High
- manageengine analytics plus, zohocorp manageengine analytics plus +1 moreSensitive Data Exposure8.1 High
- davidguva openvidreviewOpenVidReview 1.0 is vulnerable to Incorrect Access Control. The /upload route is accessible...9.8 Critical
- mozilla firefoxOn Android, Firefox may have inadvertently allowed viewing saved passwords without the required...5.7 Medium
- axis communications ab camera station, camera station pro +1 moreGee-netics, member of the AXIS Camera Station Pro Bug Bounty Program has found that it is...4.2 Medium
- Show moreLoading…