CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- mervinpraison praisonaiPraisonAI AgentLoop onToolCall approval runs after tool execution8.8 High
- mervinpraison praisonaiPraisonAI SandboxExecutor allowedCommands bypass via shell chaining8.8 High
- mervinpraison praisonaiPraisonAI codeMode sandbox escape via Function constructor9.9 Critical
- mervinpraison praisonaiPraisonAI SandboxExecutor network-isolated mode does not block non-proxy-aware network clients7.6 High
- mervinpraison praisonaiagentsPraisonAI: execute_code sandbox bypass: str.format C-level attribute access reads every blocklisted dunder6.5 Medium
- mervinpraison praisonaiPraisonAI recipe.run_stream skips dangerous-tool policy enforcement7.8 High
- openwebui open webui, open-webui +1 moreOpen WebUI: Stored XSS to Account Takeover via Model Profile Images in Open WebUI7.6 High
- google androidIn multiple functions of btm_sec.cc, there is a possible way for an attacker to intercept SMS...4.3 Medium
- google chromeInappropriate implementation in Extensions in Google Chrome prior to 149.0.7827.155 allowed a...4.2 Medium
- google chromeInappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.155...8.3 High
- n8nn8n - AST Validator Bypass in Python Code Node5.3 Medium
- denoDeno: `fetch()` API sandbox bypass via missing DNS resolution check5.2 Medium
- openclawOpenClaw < 2026.5.12 - Argument Pattern Bypass in Exec Allowlist via Linux and macOS7.6 High
- openclawOpenClaw < 2026.5.6 - Skill-Command Dispatch Hook Bypass via Before-Tool-Call Hook Skipping2.3 Low
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the DOM: Security component6.5 Medium
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the Security: Process Sandboxing component9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Navigation component9.6 Critical
- mozilla firefox, thunderbird, red hat enterprise linux 10 +15 more +17 moreSandbox escape in the DOM: Workers component9.6 Critical
- qihoo 360 total securityQihoo 360 Total Security Nucleus Engine Monitoring Logic RpcStringBindingComposeW protection mechanism8.5 High
- google chromeInappropriate implementation in Views in Google Chrome on Windows prior to 149.0.7827.115 allowed...8.3 High
- google chromeInappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a...9.6 Critical
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.4, macOS...5.5 Medium
- apple macosThis issue was addressed with improved checks to prevent unauthorized actions. This issue is...8.8 High
- lingdojo kana-dojoKanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs8.5 High
- fissionFission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape9.9 Critical
- fissionFission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover9.9 Critical
- kerberosmansour hulumiHulumi: AccountFoundation reuse paths silently downgrade GuardDuty / Security Hub posture6.3 Medium
- kerberosmansour hulumiHulumi: Policy packs bypassed by a forged Pulumi-URN logical name8.4 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows Boot Manager Security Feature Bypass Vulnerability7.9 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +23 more +25 moreWindows Mark of the Web Security Feature Bypass Vulnerability5.4 Medium
- microsoft 365 apps, 365 apps for enterprise, office 365 for mac +6 more +8 moreMicrosoft Excel Security Feature Bypass Vulnerability3.3 Low
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreSecure Boot Security Feature Bypass Vulnerability7.9 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreSecure Boot Security Feature Bypass Vulnerability7.9 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreSecure Boot Security Feature Bypass Vulnerability7.9 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreSecure Boot Security Feature Bypass Vulnerability7.9 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreUEFI Secure Boot Security Feature Bypass Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +24 more +26 moreWindows BitLocker Security Feature Bypass Vulnerability5.3 Medium
- google chromeInappropriate implementation in Passwords in Google Chrome prior to 149.0.7827.103 allowed a...4.3 Medium
- google chromeInsufficient policy enforcement in Network in Google Chrome prior to 149.0.7827.103 allowed a...3.1 Low
- actualbudget actualactual Allows Electron to Run As Node4.8 Medium
- google chromeInsufficient policy enforcement in Blink in Google Chrome prior to 149.0.7827.53 allowed a remote...4.3 Medium
- google chromeInsufficient policy enforcement in CSS in Google Chrome prior to 149.0.7827.53 allowed a remote...6.5 Medium
- google chromeInsufficient policy enforcement in Sandbox in Google Chrome on Linux prior to 149.0.7827.53...9.6 Critical
- google chromeInappropriate implementation in SafeBrowsing in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromePolicy bypass in Content Security Policy in Google Chrome prior to 149.0.7827.53 allowed a remote...4.3 Medium
- google chromeInsufficient policy enforcement in WebAuthentication in Google Chrome on Android prior to 149.0...6.5 Medium
- google chromeInappropriate implementation in Permissions in Google Chrome prior to 149.0.7827.53 allowed a...4.3 Medium
- google chromeInappropriate implementation in Google Lens in Google Chrome prior to 149.0.7827.53 allowed a...8.8 High
- Show moreLoading…