CWE-276: Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
A kind of CWE-732 Incorrect Permission Assignment for Critical Resource.
From the CWE List. © The MITRE Corporation.
Newest
- forescout secureconnectorRemote Code Execution in Windows Secure Connector/ HPS Inspection Engine via Insecure Named Pipe Access8.7 High
- amd aim-t manageability apiIncorrect default permissions in the AMD Manageability API could allow an attacker to achieve...7.3 High
- amd aim-t manageability apiA DLL hijacking vulnerability in the AMD Manageability API could allow an attacker to achieve...7.3 High
- amd optimizing cpu libraries (aocl)A DLL hijacking vulnerability in the AMD Optimizing CPU Libraries could allow an attacker to...7.3 High
- amd optimizing cpu libraries (aocl)Incorrect default permissions in the AMD Optimizing CPU Libraries (AOCL) installation directory...7.3 High
- red hat mirror registry for red hat openshift, mirror-registry-2.0-rhel-8 +1 moreMirror-registry: local privilege escalation due to incorrect permissions in mirror-registry8.2 High
- huawei harmonyosPermission control vulnerability in the media library module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosPermission control vulnerability in the contacts module Impact: Successful exploitation of this...5.1 Medium
- msp360 backupMSP360 Backup (for Linux) insecure filesystem permissions8.5 High
- google androidIn onCreate of InstallStart.java, there is a possible permissions bypass due to improper input...5.1 Medium
- seiko epson corporation epson printer drivers for windows osMultiple SEIKO EPSON printer drivers for Windows OS are configured with an improper access...8.4 High
- netscout ngeniusoneNETSCOUT nGeniusONE before 6.4.0 b2350 allows local users to leverage Insecure Permissions for...7.1 High
- tenable nessusLocal Priviledge Escalation7.8 High
- oracle corporation mysql connectors, oracle mysql connector\/j +1 moreVulnerability in the MySQL Connectors product of Oracle MySQL (component: Connector/J). ...7.5 High
- oracle ras security, oracle corporation database server +1 moreVulnerability in the RAS Security component of Oracle Database Server. Supported versions that...7.3 High
- rockwell automation thinmanager®, rockwellautomation thinmanager +1 moreLocal Privilege Escalation in ThinManager®8.5 High
- microsoft autoupdate, autoupdate for mac +1 moreMicrosoft AutoUpdate (MAU) Elevation of Privilege Vulnerability7.8 High
- szlbt lbt-t300-t400 firmwareAn issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to...7.8 High
- huang-yk student-manageInsecure Permission vulnerability in student-manage 1 allows a local attacker to escalate...7.8 High
- amd ryzen™ ai softwareIncorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker...7.3 High
- apple ipados, macos, tvos +3 more +5 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Ventura 13.7.5,...9.8 Critical
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Ventura 13...7.8 High
- apple macosA logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...7.8 High
- apple macosAn integer overflow was addressed with improved input validation. This issue is fixed in macOS...9.8 Critical
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...9.8 Critical
- apple macosA permissions issue was addressed with additional restrictions. This issue is fixed in macOS...7.8 High
- apple ipados, macos +1 moreA permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura...9.8 Critical
- apple macosA permissions issue was addressed with additional sandbox restrictions. This issue is fixed in...9.8 Critical
- apple macosA parsing issue in the handling of directory paths was addressed with improved path validation....7.8 High
- watchguard sso terminal services agentWatchGuard Terminal Services Agent Local Privilege Escalation via Non-Standard Installation Directory6.3 Medium
- watchguard mobile vpn with ssl clientWatchGuard Mobile VPN with SSL Local Privilege Escalation via Non-Standard Installation Directory6.3 Medium
- No product listedHTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate...9.8 Critical
aws-cdk-libnpmAWS CDK CodePipeline: trusted entities are too broad3.8 Low- youki-dev youkiLibcontainer is affected by capabilities elevation5.9 Medium
- tenable nessus agentWhen installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions...7.8 High
- linuxfoundation pipecdPipeCD Vulnerable to Privilege Escalation9.8 Critical
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed through improved state management. This issue is fixed in visionOS 1.3,...6.5 Medium
- hamza417 hamza417/inureTask Hijacking in hamza417/inure5.5 Medium
- nintex automationIn Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration...4.3 Medium
- suse opensuse tumbleweedgerbera: Privilege escalation from user gerbera to root because of insecure %post script7.8 High
- samsung wear os, samsung mobile devices +1 moreIncorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local...6.2 Medium
- rsupport co.,ltd. remoteview agent (for windows)Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows)...7.8 High
- rsupport co.,ltd. remoteview agent (for windows)Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows)...7.8 High
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330...9.8 Critical
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...9.8 Critical
- huawei harmonyosVulnerability of improper access permission in the HDC module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosPermission verification vulnerability in the media library module Impact: Successful exploitation...5.0 Medium
- huawei harmonyosPermission verification vulnerability in the media library module Impact: Successful exploitation...5.0 Medium
- huawei harmonyosPermission management vulnerability in the lock screen module Impact: Successful exploitation of...6.2 Medium
- huawei harmonyosVulnerability of improper access permission in the process management module Impact: Successful...6.8 Medium
- Show moreLoading…