CWE-668: Exposure of Resource to Wrong Sphere
The product exposes a resource to the wrong control sphere, providing unintended actors with inappropriate access to the resource.
A kind of CWE-664 Improper Control of a Resource Through its Lifetime.
From the CWE List. © The MITRE Corporation.
Newest
- sandboxie-plus sandboxie Sandboxie-Plus: Sandbox containment bypass 6.9 Medium
- google chrome Improper resource exposure in ORB in Google Chrome prior to 157.0.8103.38 allowed a remote... No score
- google chrome Improper resource exposure in DevTools in Google Chrome prior to 157.0.8103.38 allowed a remote... 8.8 High
- beam-cloud beta9 gateway, beta9 worker +1 more Beta9 host filesystem exposure via volume path traversal 9.9 Critical
- google agent development kit (adk) for python Cross-Application Artifact Namespace Isolation in Google Agent Development Kit (ADK) for Python 5.3 Medium
- google chrome Memory corruption in PolicyContainer in Google Chrome prior to 156.0.8078.47 allowed a remote... 9.6 Critical
- google chrome Improper input validation in Privacy in Google Chrome prior to 156.0.8078.47 allowed a remote... 9.6 Critical
- tox-dev filelock filelock: ReadWriteLock follows a symlink at the lock path into SQLite 6.1 Medium
- wso2 carbon scim 2.0 common component, carbon scim common component, identity server +2 more +4 more Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover 8.2 High
- netbox-community netbox NetBox 2.9.5 < 4.7.0 Session Hijacking via Custom Links 6.9 Medium
- google chrome Improper resource exposure in Extensions in Google Chrome prior to 155.0.8059.39 allowed a remote... 4.3 Medium
- vllm vLLM: Scale-out disaggregated multimodal transport trusts caller-supplied features 6.5 Medium
- docling, docling-project docling-slim +1 more Docling: KServe v2 OCR engine does not enforce enable_remote_services 2.2 Low
- newell brands dymo id Newell Brands DYMO ID parent directory open to path traversal through improper spheres of control 7.0 High
- accellion kiteworks, kiteworks core +1 more Kiteworks Core Sandbox Escape 8.8 High
- google gvisor Host Root Sandbox Escape in gVisor via Character Device Passthrough and CUSE 8.8 High
- foxit pdf editor, pdf reader +1 more Foxit PDF Editor/Reader Missing Authorization Information Disclosure Vulnerability 4.7 Medium
- darkreader Dark Reader: Ability to request icon-like bitmap data from certain local web servers 3.4 Low
- zte nx741j Wi-Fi MAC Address Obtainment by Non-privileged Program Vulnerability in ZTE Z80Ultra (NX741J) product 3.3 Low
- midnightbsd mport mport package installation can overwrite existing unmanaged or differently owned files 6.0 Medium
- patriksimek vm2 vm2 before 3.11.7 Memory Disclosure via Buffer Pool 10.0 Critical
- patriksimek vm2 vm2 3.11.3 through 3.11.6 HTTPS Credential Exposure via globalAgent 10.0 Critical
- acer system monitoring WebSocket Exposure Vulnerability in NitroSense and PredatorSense Software 2.7 Low
- djust-org djust djust's observability endpoints are network-exposed: the localhost gate is an opt-in middleware the docs omit, and the views enforce only DEBUG 7.4 High
- google chrome Improper resource exposure in CacheStorage in Google Chrome prior to 152.0.7977.82 allowed a... 8.8 High
- siyuan-note siyuan SiYuan before v3.8.1 Information Disclosure via Publish Access 6.9 Medium
- siyuan-note siyuan SiYuan before v3.8.1 Path Traversal via /api/template/render 5.9 Medium
- cli GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default 2.1 Low
- google chrome Improper resource exposure in StreamsAPI in Google Chrome prior to 152.0.7977.65 allowed a remote... 4.3 Medium
- google chrome Improper resource exposure in Preload in Google Chrome prior to 152.0.7977.65 allowed a remote... 3.1 Low
- siyuan-note siyuan SiYuan before v3.7.4 Plugin Overwrite via Bazaar Install 5.9 Medium
- spring ai, vmware spring ai +1 more Semantic Cache Cross-Tenant Isolation Bypass via SHA-256 Truncation 4.2 Medium
- openchoreo OpenChoreo: Unauthenticated access to data-plane operations via OpenChoreo cluster-gateway management APIs 9.6 Critical
- craftcms cms Craft CMS 5.0.0-RC1 before 5.10.6 Environment Variable Leak 7.1 High
- electron Electron: ProtocolResponse.url reuses the default session cache instead of the registering session 5.9 Medium
- activepieces Activepieces: Cross-tenant data exposure and code injection via the Code piece sandbox cache 9.3 Critical
- flytohub flyto-core Flyto2 Core: ${env.VAR} interpolation reads any env secret despite env.get being denylisted 8.6 High
- termux proot-distro proot-distro has a Container Isolation Bypass via Crafted Restore Archive 8.2 High
- n8n n8n before 1.123.67 Module Cache Poisoning via Code Node 5.8 Medium
- linux, linux kernel +1 more xfrm: route MIGRATE notifications to caller's netns 7.3 High
- andrea9293 mcp-documentation-server MCP Documentation Server: Web UI API binds to all interfaces without authentication by default 8.8 High
- github view component view_component: Reused Component Instances Retain Stale Render Context 6.8 Medium
- open-feature open-feature-operator Cross-namespace FeatureFlagSource and InProcessConfiguration resolution exposes spec contents on multi-tenant clusters 4.3 Medium
- pegatron corp. tdelo64.sys CVE-2026-14960 9.8 Critical
- fortinet fortisandbox A exposure of resource to wrong sphere vulnerability in Fortinet FortiSandbox 5.0.0 through 5.0.2... 7.7 High
- lima-vm lima Lima: An arbitrary user in a QEMU VM could gain the root privilege in the VM via the guest agent socket 8.2 High
- fossbilling FOSSBilling: Downloadable product files can be overwritten through filename collisions 5.1 Medium
- deepmyst mysti DeepMyst Mysti Per-Project Auto-Memory MemoryManager.ts initProjectMemory exposure of resource 5.3 Medium
- containers podman Podman: Malformed Image can trick podman run into leaking host environment variables into the container 7.5 High
- mervinpraison praisonai PraisonAI - Information Disclosure via Shared MultiAgentLedger State 7.1 High
- Show olderLoading…