CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn onChange of BiometricService.java, there is a possible way to enable fingerprint unlock due to...7.7 High
- google androidIn setHideSensitive of ExpandableNotificationRow.java, there is a possible contact name leak due...6.2 Medium
- google androidIn enableSystemPackageLPw of Settings.java, there is a possible way to prevent location access...8.4 High
- google androidIn multiple functions of TaskFragmentOrganizerController.java, there is a possible activity token...7.7 High
- google androidIn exitKeyguardAndFinishSurfaceBehindRemoteAnimation of KeyguardViewMediator.java, there is a...8.4 High
- n8nn8n - Guardrail Node Bypass via Crafted Input6.3 Medium
- mozilla firefox, thunderbird +1 moreInformation disclosure, mitigation bypass in the Settings UI component7.5 High
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Storage: IndexedDB component10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreSandbox escape in the Graphics: WebRender component10.0 Critical
- apple macos, visionos, watchos +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.7.4,...7.5 High
- apple ipados, macos, watchos +2 more +4 moreA logic issue was addressed with improved checks. This issue is fixed in watchOS 26.3, macOS...8.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreWindows Shell Security Feature Bypass Vulnerability8.8 High
- microsoft windows, windows 10 version 1607, windows 10 version 1809 +27 more +29 moreMSHTML Framework Security Feature Bypass Vulnerability8.8 High
- n8nn8n is vulnerable to Python sandbox escape9.4 Critical
- n8nn8n Arbitrary File Write leading to RCE in n8n Merge Node9.4 Critical
- tp-link systems inc. axe75L2TP over IPSec Encryption Failure on ArcherAXE756.0 Medium
- beyondtrust privilege management for windowsAnti-Tamper Bypass in BeyondTrust Privilege Management for Windows6.8 Medium
agentos-taskweaverPyPITaskWeaver has Protection Mechanism Failure and Server-Side Request Forgery (SSRF)6.5 Medium- solarwinds web help deskSolarWinds Web Help Desk Security Control Bypass Vulnerability8.1 High
- nyariv sandboxjsSandboxJS has Sandbox Escape via Unprotected AsyncFunction Constructor10.0 Critical
- xenx86: incomplete IBPB for vCPU isolation2.9 Low
- mozilla firefoxMitigation bypass in the Privacy: Anti-Tracking component6.5 Medium
- patriksimek vm2vm2 has a Sandbox Escape9.8 Critical
- hcl aionHCL AION is affected by a Missing Security Response Headers vulnerability.3.5 Low
- agentfront enclaveSandbox Escape via Host Error Prototype Chain in enclave-vm10.0 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Remote Assistance Security Feature Bypass Vulnerability5.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +4 more +6 moreSandbox escape in the Messaging System component10.0 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +18 more +20 moreMitigation bypass in the DOM: Security component8.1 High
- pnpm, red hat jboss enterprise application platform 8, jboss enterprise application platform expansion pack +2 morepnpm v10+ Bypass "Dependency lifecycle scripts execution disabled by default"8.8 High
- empiresoft empirecmsEmpireSoft EmpireCMS IP Address connect.php egetip protection mechanism6.9 Medium
- mmaitre314 picklescanpicklescan - Remote Code Execution via operator.methodcaller Detection Bypass7.6 High
- mmaitre314 picklescanPickleScan - Unsafe Globals Check Bypass via pty.spawn Function8.7 High
- n8nn8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Node9.9 Critical
- apple macosA logic issue was addressed with improved checks. This issue is fixed in macOS Tahoe 26.2. An app...8.8 High
- apple macosA logic issue was addressed with improved validation. This issue is fixed in macOS Tahoe 26.2. An...7.8 High
- hcl software bigfix remote control, hcltechsw hcl devops deploy, hcl launch +2 moreHCL BigFix Remote Control is vulnerable to an insecure CSP configuration4.7 Medium
- mattermost, mattermost desktop +1 moreMattermost Desktop App fails to enable Hardened Runtime when packaged for Mac App Store3.9 Low
- radiometer medical aps abl800 basic and abl800 flex analyzers, abl9 analyzers, abl90 flex and abl90 flex plus analyzers +1 more +3 morePrivilege boundary violation in Radiometer Products6.8 Medium
- asrock intel 500 chipset motherboard, intel 600 chipset motherboard, intel 700 chipset motherboard +1 more +3 moreASRock, ASRockRack, ASRockInd｜Motherboard - Protection Mechanism Failure7.0 High
- asrockind intel 600 chipset motherboard, intel 700 chipset motherboard +1 moreMSI｜Motherboard - Protection Mechanism Failure7.0 High
- asrockind intel 600 chipset motherboard, intel 700 chipset motherboard, intel 800 chipset motherboard +3 more +5 moreGIGABYTE｜Motherboard - Protection Mechanism Failure7.0 High
- blixhq bluemailWhen using the attachment interaction functionality, Blue Mail 1.140.103 and below saves...9.1 Critical
- canarymail canary mailWhen using the attachment interaction functionality, Canary Mail 5.1.40 and below saves documents...9.1 Critical
- zoom roomsZoom Rooms for Windows - Software Downgrade Protection Mechanism Failure7.8 High
- digitalpa s.r.l. legality whistleblowingLegality WHISTLEBLOWING Missing Critical HTTP Security Headers7.1 High
- machphy mad-proxyHTTP/HTTPS Traffic Interception Bypass in mad-proxy5.3 Medium
- wbce cmsWBCE CMS allows brute-force protection bypass using X-Forwarded-For header6.3 Medium
- anthropic-experimental sandbox-runtimeAnthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing1.8 Low
- envoyproxy envoyEnvoy forwards early CONNECT data in TCP proxy mode3.7 Low
- estsoft alzipProtection Mechanism Failure vulnerability in ESTsoft ALZip on Windows allows SmartScreen bypass...6.2 Medium
- Show moreLoading…