CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn multiple locations, there is a possible way to launch an application from the background due...9.8 Critical
- google androidIn U-Boot of append_uint32_le(), there is a possible fault injection due to a logic error in the...6.8 Medium
- ilbers isarSecurity Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set6.9 Medium
- benmoody wp headless cms frameworkWP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass5.3 Medium
- microsoft visual studio codeGitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability5.0 Medium
- No product listedProtection mechanism failure in the UEFI firmware for the Slim Bootloader within firmware may...7.1 High
firmware-nonfreeDebianProtection mechanism failure for some Intel(R) NPU Drivers within Ring 3: User Applications may...6.8 Medium- intel computing improvement programProtection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...5.4 Medium
- intel computing improvement programProtection mechanism failure for some Intel(R) CIP software before version WIN_DCA_2.4.0.11001...6.0 Medium
- avast free antivirusCollision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection4.4 Medium
io.github.ascopes:protobuf-maven-pluginMavenProtobuf Maven Plugin protocDigest is ignored when using protoc from PATH1.0 Low- apple ipados, macos, tvos +5 more +7 moreAn access issue was addressed with additional sandbox restrictions. This issue is fixed in...7.5 High
- microsoft edge (chromium-based), edge chromium +1 moreMicrosoft Edge (Chromium-based) Remote Code Execution Vulnerability6.3 Medium
- azure access technology blu-ic2, blu-ic4, azure-access blu-ic2 firmware +1 more +3 moreMissing Security Headers6.9 Medium
- oopspam anti-spam: spam protection for wordpress forms & comments (no captcha)OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing5.3 Medium
- hcl software bigfix mobile, hcltech bigfix modern client management +1 moreHCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)6.5 Medium
- hcl software bigfix modern client management, hcltech bigfix mobile +1 moreHCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)6.5 Medium
- hcl software unica platform, hcltech unica +1 moreHCL Unica Platform is impacted by misconfigured security related HTTP headers3.5 Low
- apple macosA logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26. An...5.5 Medium
- No product listedAn Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD. The flaw exists...6.5 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayUnauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface8.6 High
- mozilla firefox, thunderbird +1 moreSandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component7.3 High
- apple macosThis issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15...8.2 High
- mmaitre314 picklescanPickleScan Security Bypass Using Misleading File Extension9.3 Critical
- mmaitre314 picklescanPickleScan Security Bypass via Bad CRC in ZIP Archive9.3 Critical
- mmaitre314 picklescanPickleScan Bypasses Unsafe Globals Check Using Submodule Imports9.3 Critical
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +32 more +34 moreMapUrlToZone Security Feature Bypass Vulnerability4.3 Medium
- microsoft windowsThe Microsoft vulnerable driver block list is implemented as Windows Defender Application Control...7.4 High
- google chromeInsufficient policy enforcement in Devtools in Google Chrome prior to 140.0.7339.80 allowed a...5.3 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 140.0.7339.80 allowed a...5.4 Medium
- google androidIn getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a...7.8 High
- google androidIn setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an...7.8 High
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a...8.8 High
- google androidIn handlePackagesChanged of DevicePolicyManagerService.java, there is a possible persistent...6.1 Medium
- google androidIn checkPermissions of SafeActivityOptions.java, there is a possible background activity launch...7.8 High
- google androidIn getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of...8.8 High
- google androidIn getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a...7.8 High
- google androidIn setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM...7.8 High
- google androidIn gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic...7.8 High
- google androidThere is a possible escalation of privilege due to a logic error in the code. This could lead to...7.8 High
- google androidIn showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning...7.8 High
- google androidIn executeAppFunction of AppSearchManagerService.java, there is a possible background activity...7.8 High
- google androidIn multiple locations, there is a possible way to hijack the Launcher app due to a logic error in...7.8 High
- cisco nexus dashboard, data center network manager +1 moreCisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability5.4 Medium
- dell thinos, thinos 10 +1 moreDell ThinOS 10, versions prior to 2508_10.0127, contain a Protection Mechanism Failure...9.6 Critical
- mmaitre314 picklescanpicklescan - Remote Code Execution via Undetected trace.Trace.runctx in Pickle Files7.6 High
- boom-core boomvA vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where...4.3 Medium
- No product listedProtection mechanism failure in the Intel(R) Graphics Driver for the Intel(R) Arc(TM) B-Series...4.1 Medium
- No product listedProtection mechanism failure for some Edge Orchestrator software before version 24.11.1 for Intel...5.1 Medium
- tianocore edk2SMM IDT Privilege Escalation Vulnerability7.0 High
- Show moreLoading…