CWE-280: Improper Handling of Insufficient Permissions or Privileges
The product does not handle or incorrectly handles when it has insufficient privileges to access resources or functionality as specified by their permissions. This may cause it to follow unexpected code paths that may leave the product in an invalid state.
A kind of CWE-755 Improper Handling of Exceptional Conditions.
From the CWE List. © The MITRE Corporation.
Newest
- gen digital avast antivirus, avast one, avast premium security, avast ultimate, avg antivirus free, avg internet security, avg ultimate, norton antivirus plus, norton 360 standard, norton 360 deluxe, norton 360 advanced +2 more Avast sandbox escape via unpreserved COM pathway through Task Scheduler No score
- mediatek, inc. mediatek chipset In Modem, there is a possible escalation of privilege due to a missing permission check. This... 6.7 Medium
- mediatek, inc. mediatek chipset In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to... 4.4 Medium
- lobster data gmbh pro Privilege escalation via request replaying in Lobster_pro 5.6 Medium
- gitea Gitea private reusable workflow disclosure to fork runs 5.3 Medium
- samsung mobile devices Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows... 6.9 Medium
- No product listed An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the... 8.4 High
- zammad Zammad: Titles of knowledge base answers will be shown across all categories via the global search 2.1 Low
- the wikimedia foundation mediawiki - wikilambda extension WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions 2.9 Low
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization 5.4 Medium
- dell smartfabric manager Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient... 3.5 Low
- secomea gatemanager Improper handling of insufficient permissions or privileges vulnerability in Secomea GateManager... 6.5 Medium
- apple macos This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden... 7.8 High
- apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... 7.8 High
- apple macos A permissions issue was addressed with additional restrictions. This issue is fixed in macOS... 7.8 High
- apple macos This issue was addressed with additional entitlement checks. This issue is fixed in macOS Golden... 7.8 High
- samsung android, samsung mobile devices +1 more Improper access control in SettingsProvider prior to SMR Sep-2026 Release 1 allows local... 5.1 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +20 more +22 more Windows Enterprise App Management Elevation of Privilege Vulnerability 7.8 High
- zscaler client connector Local privilege escalation 8.8 High
-
wagtailPyPI Wagtail: Improper restriction handling on Page translation API endpoint 6.5 Medium -
wagtailPyPI Wagtail: Improper permission handling when copying snippets 6.5 Medium -
wagtailPyPI Wagtail: Improper restriction handling on descendant collections in Documents and Images API 5.3 Medium -
wagtailPyPI Wagtail: Identification of documents by SHA1 hash 3.7 Low - wagtail Wagtail: Improper restriction handling on Pages admin API 4.3 Medium
- apache allura Apache Allura: Missing permission checks IDOR 6.5 Medium
- wintercms winter Winter: Broken access control in `Cms\Controllers\Index` allows cross-template actions and unauthorized asset uploads 6.8 Medium
- rapid7 velociraptor Velociraptor incorrect Org deletion permissions check 8.7 High
- tridium niagara enterprise security, niagara framework +1 more Program Module Vulnerability 5.2 Medium
- gitea open source git server Fork-PR Actions task can read a third private repository via the collaborative-owner branch (missing fork-PR guard) 7.1 High
- apache kylin Apache Kylin: Improper authorization in job information retrieval 4.3 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - Arbitrary GPU register write in rgxfw_hwperf_hw due to unsanitized pointers from host kernel 7.8 High
- torchbox wagtail Wagtail: Pages translations can be created without page permissions when using simple_translation 4.3 Medium
- torchbox wagtail Wagtail: Improper permission handling in image preview 6.5 Medium
- torchbox wagtail Wagtail: Improper restriction handling on Documents and Images chosen endpoints 4.3 Medium
- mediatek, inc. mediatek chipset In Modem, there is a possible escalation of privilege due to a permissions bypass. This could... 6.7 Medium
- imaginationtech ddk, imagination technologies graphics ddk +1 more GPU DDK - rgxfw_set_mips_fault_address(&psInit->sFaultPhysAddr) is untrusted 7.8 High
- apache software foundation kvrocks Apache Kvrocks: Improper permission for the APPLYBATCH command 9.4 Critical
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 more Microsoft Dynamics 365 (on-premises) Elevation of Privilege Vulnerability 8.8 High
- pretix Data exposed without proper permission 3.6 Low
- yandex database Privilege escalation in Yandex Database 5.3 Medium
- red hat build of keycloak 26.4, build of keycloak 26.4.13, build of keycloak 26.6 +2 more +4 more Keycloak: keycloak: security restriction bypass allows unauthorized ropc token acquisition 6.5 Medium
- linux, linux kernel, red hat enterprise linux 10 +13 more +15 more selinux: fix overlayfs mmap() and mprotect() access checks 7.1 High
- samba, red hat enterprise linux 10, enterprise linux 10.0 extended update support +21 more +23 more Samba: vfs_worm does not block directory modification 6.5 Medium
- torchbox wagtail Wagtail: Improper permission handling when copying pages 6.5 Medium
- torchbox wagtail Wagtail: Improper restriction handling on Documents and Images API 5.3 Medium
- torchbox wagtail Wagtail: Improper permission handling when deleting form submissions 6.5 Medium
- torchbox wagtail Wagtail: Improper permission handling when viewing page history 4.3 Medium
- torchbox wagtail Wagtail: Improper permission handling when comparing revisions 6.5 Medium
- ercom cryptobox, thalesgroup ercom cryptobox +1 more Vulnerability on Cryptobox external sharing feature 6.9 Medium
- mediatek mt6765 firmware, mt6768 firmware, mt6789 firmware +20 more +22 more In geniezone, there is a possible escalation of privilege due to a missing permission check. This... 6.7 Medium
- Show olderLoading…