CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- apple ipados, macos, tvos +4 more +6 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 26.6.1 and iPadOS 26...5.0 Medium
- notepad-plus-plusNotepad++: shortcuts.xml Macro HMAC Bypass Enables Conditional Elevated Command Execution5.4 Medium
- patriksimek vm2vm2: Missing Error.cause Sanitization Enables VM2 Sandbox Escape to RCE9.9 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Sandbox Escape via Dunder Attribute Traversal9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Plugin Sandbox Bypass via Process Isolation9.3 Critical
- jahlives openssl encryptopenssl_encrypt before 1.4.0 Sandbox Bypass via pathlib and io8.7 High
- ibm db2 mirror for iIBM Db2 Mirror for i is affected by multiple vulnerabilities6.3 Medium
- aws opensearchSQL Query Validation Bypass in OpenSearch Direct Query8.7 High
- palo alto networks prisma access agentPrisma Access Agent: Anti-Tamper Protection Bypass on Windows5.6 Medium
- rustfsRustFS: Object Lock (WORM) protections are treated as absent when bucket metadata cannot be read, allowing retained objects to be deleted6.1 Medium
- No product listedCPSD CryptoPro Secure Disk for Bitlocker before v7.7.4 fails to enforce IMA policy protections...9.8 Critical
- cursorCursor: Sandbox escape via tampered Python virtual environments7.7 High
- microsoft python, python extension for visual studio code +1 moreVisual Studio Code Python Extension Security Feature Bypass Vulnerability7.8 High
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability7.8 High
- microsoft .net, .net 8.0 runtime, .net 9.0 runtime +4 more +6 more.NET Information Disclosure Vulnerability6.5 Medium
- activepiecesActivepieces: V8 Isolate Sandbox Bypass via importFresh Module Loading7.6 High
- intel transfer learning toolProtection mechanism failure for some Intel(R) Transfer Learning Tool before version v0.7 within...6.3 Medium
- intel workload sevices frameworkProtection mechanism failure for some Intel(R) Workload Services Framework software within Ring 3...5.4 Medium
- No product listedProtection mechanism failure for some LLM-on-Ray before version 1.0 within Ring 3: User...5.4 Medium
- intel oneccl bindings for pytorchProtection mechanism failure for some Intel(R) oneCCL Bindings for PyTorch before version v2.8.0...5.4 Medium
- intel ai reference modelsProtection mechanism failure for some Intel(R) AI Reference Models before version v3.4.1 within...5.4 Medium
- intel llm library for pytorchProtection mechanism failure for some Intel(R) LLM Library for PyTorch within Ring 3: User...5.4 Medium
- intel neural compressorProtection mechanism failure for some Intel(R) Neural Compressor software before version v3.6...5.4 Medium
- intel ai containersProtection mechanism failure for some Intel(R) AI Containers before version v0.4.0 within Ring 3:...5.4 Medium
- intel cluster management toolkit for kubernetesProtection mechanism failure for some Cluster Management Toolkit for Kubernetes software before...5.4 Medium
- intel llm-scaler-vllmProtection mechanism failure for some LLM Scaler software within Ring 3: User Applications may...5.4 Medium
- intel extension for tensorflowProtection mechanism failure for some Intel Extension for TensorFlow software before version 2.15...5.4 Medium
- intel data center attestation primitivesProtection mechanism failure for some Intel(R) Data Center Attestation Primitives (Intel(R) DCAP)...8.9 High
- craftcms cmsCraft CMS 5.0.0-RC1 before 5.10.7 Remote Code Execution via Twig Sandbox Escape8.7 High
- google chromeInsufficient policy enforcement in Navigation in Google Chrome prior to 151.0.7922.109 allowed a...8.3 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...8.8 High
- google chromeInappropriate implementation in V8 in Google Chrome prior to 151.0.7922.109 allowed a remote...8.8 High
- unknown security optimizerSecurity Optimizer – The All-In-One Protection Plugin < 1.6.5 - Login Access IP Allowlist Bypass via post_password5.3 Medium
- wso2 api control plane, api manager, identity server +7 more +9 moreAccount Takeover via Conditional Authentication Script Logic in Multiple WSO2 Products9.4 Critical
- wso2 api control plane, api manager, identity server +7 more +9 moreAccount Lockout Failure via Secondary User Store Inaccessibility in Multiple WSO2 Products Allows Brute Force Attacks5.9 Medium
- jenkins project violation comments to gitlab pluginA missing permission check in Jenkins Violation Comments to GitLab Plugin 2.62.0 and earlier...4.3 Medium
- electronElectron: Sandboxed iframe can bypass the allow-popups restriction via the OpenURL navigation path7.2 High
- electronElectron: Context isolation bypass via Function.prototype.bind hijack7.5 High
- google chromeInappropriate implementation in Tint in Google Chrome on Mac prior to 151.0.7922.72 allowed a...9.6 Critical
- google chromeInappropriate implementation in Parser in Google Chrome prior to 151.0.7922.72 allowed a remote...4.3 Medium
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote...6.5 Medium
- google chromeInappropriate implementation in DevTools in Google Chrome prior to 151.0.7922.72 allowed a remote...6.5 Medium
- google chromePolicy bypass in Enterprise in Google Chrome prior to 151.0.7922.72 allowed a remote attacker to...6.5 Medium
- google chromeInsufficient policy enforcement in Enterprise in Google Chrome on Mac prior to 151.0.7922.72...6.8 Medium
- google chromeInsufficient policy enforcement in DevTools in Google Chrome prior to 151.0.7922.72 allowed an...8.8 High
- google chromePolicy bypass in Extensions in Google Chrome prior to 151.0.7922.72 allowed an attacker who...6.5 Medium
- google chromeInappropriate implementation in Crypto in Google Chrome on Mac prior to 151.0.7922.72 allowed a...9.6 Critical
- google chromeInappropriate implementation in Network in Google Chrome on Mac prior to 151.0.7922.72 allowed a...9.6 Critical
- google chromeInappropriate implementation in Site Isolation in Google Chrome prior to 151.0.7922.72 allowed a...5.4 Medium
- google chromePolicy bypass in Receiver in Google Chrome prior to 151.0.7922.72 allowed a remote attacker who...5.8 Medium
- Show moreLoading…