CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- jupyterlab jupyterlab-desktop JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses 5.5 Medium
- jupyterlab jupyterlab-desktop JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS) 5.5 Medium
- python software foundation cpython Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10 8.2 High
- red hat openshift ai (rhoai) Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug) No score
- apache software foundation sling engine Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths No score
- ibm db2 genius hub Multiple vulnerabilities that affects IBM Db2 Genius Hub 3.5 Low
- ibm db2 genius hub Multiple vulnerabilities that affects IBM Db2 Genius Hub 5.4 Medium
- docker buildx Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx 7.3 High
- enspirit elo Elo: Sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access in Elo JavaScript emitter 9.8 Critical
- xen arbitrary read/write via grant copy 4.4 Medium
- apache software foundation wicket Apache Wicket: CSP headers silently omitted for pages served through nested request handler delegates 2.3 Low
- prefecthq prefab-ui Prefab UI Pyodide sandbox escape to host RCE 10.0 Critical
- google android In InputDispatcher::flushSensor of InputDispatcher.cpp, there is a possible denial of service due... 6.2 Medium
- google android In handleMessage of UsbDeviceManager.java, there is a possible lock-screen bypass due to a logic... 4.6 Medium
- google android In canPresent of PresentationController.java, there is a possible permission bypass due to a... 8.4 High
- google android In multiple locations, there is a possible permission bypass due to a logic error in the code.... 6.8 Medium
- google android In moveTaskToFrontLocked of ActivityTaskManagerService.java, there is a possible background... 8.4 High
- google android In modpowF4 of avb_rsa.c, there is a possible signature verification bypass due to a logic error... 8.4 High
- google android In navigateUpTo of ActivityClientController.java, there is a possible permission bypass due to a... 8.4 High
- google android In prepareWindowToDisplayDuringRelayout of WindowState.java, there is a possible permission... 8.4 High
- google android In multiple locations, there is a possible denial of service due to a logic error in the code.... 7.5 High
- google android In kvm_vfio_pviommu_attach of vfio.c, there is a possible double free due to a logic error in the... 8.4 High
- google android In multiple locations, there is a possible background activity launch due to a logic error in the... 8.4 High
- google android In handlePackagePostInstall of InstallPackageHelper.java, there is a possible Enhanced... 7.8 High
- google android In multiple functions of MediaCarouselController.kt, there is a possible way for media to show up... 4.0 Medium
- google android In multiple functions of SaveUi.java, there is a possible bypass of package installation... 8.4 High
- google android In onStrongAuthRequiredChanged of UsbService.java, there is a possible unauthenticated enabling... 6.8 Medium
- google android In multiple locations, there is a possible way to share files across profiles due to a logic... 4.0 Medium
- highflame-ai ramparts Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc 7.1 High
- trailofbits fickling Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables 8.8 High
- themeum kirki Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token 6.9 Medium
- dalibo postgresql anonymizer PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data 4.3 Medium
- dalibo postgresql anonymizer PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data 6.5 Medium
- acronis cyber protect 17 Linux binaries have executable stack attribute enabled. The following products are affected:... 6.3 Medium
- acronis cyber protect 17 Protection mechanism failure due to missing binary hardening in Linux executables. The following... 3.6 Low
- mozilla firefox, thunderbird +1 more Mitigation bypass in the DOM: Push Subscriptions component 8.8 High
- mozilla firefox, thunderbird +1 more Mitigation bypass in the DOM: Security component 8.8 High
- mozilla firefox, thunderbird +1 more Sandbox escape in the DOM: Networking component 9.6 Critical
- mozilla firefox, thunderbird +1 more Sandbox escape in the Form Manager component 8.8 High
- mozilla firefox, thunderbird +1 more Sandbox escape in the DOM: Navigation component 9.6 Critical
- apple macos A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,... 8.4 High
- apple macos A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,... 5.5 Medium
- apple macos A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,... 7.8 High
- apple macos An access issue was addressed with additional sandbox restrictions. This issue is fixed in macOS... 8.2 High
- apple ipados, macos, safari +2 more +4 more A logic issue was addressed with improved checks. This issue is fixed in Safari 27.2, iOS 26.7.2... 5.4 Medium
- apple macos This issue was addressed with improved handling of symlinks. This issue is fixed in macOS Golden... 5.5 Medium
- apple macos This issue was addressed with improved access restrictions. This issue is fixed in macOS Golden... 8.2 High
- apple macos A logic issue was addressed with improved state management. This issue is fixed in macOS Golden... 5.5 Medium
- apple macos A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,... 5.5 Medium
- apple macos A logic issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27.2,... 7.8 High
- Show olderLoading…