CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
From the CWE List. © The MITRE Corporation.
Newest
- google androidIn multiple locations, there is a possible permission bypass due to a logic error in the code....6.7 Medium
- google androidIn multiple locations, there is a possible escalation of privilege due to a logic error in the...6.7 Medium
- google androidIn multiple locations, there is a possible permission bypass due to a missing permission check....8.4 High
- google androidIn multiple functions of fpc_tee_hal.c, there is a possible use-after-free due to a logic error...8.4 High
- google androidIn enable_segment of remap.c, there is a possible permission bypass due to a logic error in the...8.4 High
- google androidIn IP Multimedia Subsystem, there is a possible authentication bypass due to a logic error in the...9.8 Critical
- google androidIn multiple locations, there is a possible permission bypass due to a logic error in the code....7.8 High
- google androidIn addr_remap_address_map of remap.c, there is a possible escalation of privilege due to a logic...6.7 Medium
- google androidIn multiple locations, there is a possible permission bypass due to a logic error in the code....6.7 Medium
- google androidIn serviceClassExists of InCallController.java, there is a possible arbitrary code execution due...7.8 High
- google androidIn openFile of AppFuseBridge.java, there is a possible information disclosure due to a missing...3.3 Low
- google androidIn LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a logic error in...7.8 High
- google androidIn WriteImageToDisk of runtime_image.cc, there is a possible file tampering due to a logic error...7.8 High
- google androidIn findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a logic error in the...7.8 High
- google androidIn multiple functions of RemoteViews.java, there is a possible background activity launch bypass...7.8 High
- google androidIn setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypass due to a logic...7.8 High
- google androidIn executeRequest of ActivityStarter.java, there is a possible background activity launch due to...7.8 High
- google androidIn rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write due to a logic...7.8 High
- google androidIn handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to send a USSD...7.8 High
- google androidIn resolveActivity of ActivityStarter.java, there is a possible way to perform Intent Redirection...7.8 High
- google androidIn addCreatorToken of ActivityManagerService.java, there is a possible Intent Redirection Bypass...7.8 High
- google androidIn multiple locations, there is a possible use after free due to a logic error in the code. This...7.8 High
- google androidIn createSessionInternal of PackageInstallerService.java, there is a possible way to permanently...5.5 Medium
- google androidIn validate_camera_metadata_structure of camera_metadata.c, there is a possible out of bounds...7.8 High
- google androidIn ac_init_policy of init.c, there is a possible permission bypass due to a logic error in the...8.4 High
- google androidIn gsa_sw_pk_hash_compare of image-auth-srv.c, there is a possible escalation of privilege due to...6.7 Medium
- google androidIn ac_init_one_sswrp of init.c, there is a possible escalation of privilege due to a logic error...6.7 Medium
- google androidIn multiple functions of HostEmulationManager.java, there is a possible background activity...7.8 High
- google androidIn areBackgroundActivityStartsAllowed of BackgroundLaunchProcessController.java, there is a...7.8 High
- sudo project sudoSudo through 1.9.17p2 Intercept Policy Bypass via execveat8.5 High
- servicenow ai platformSandbox Escape in ServiceNow AI Platform10.0 Critical
- spring security, vmware spring security +1 moreSpring Security InetAddressMatchers Incomplete Internal Network Classification3.7 Low
- craftcms cmsAuthenticated RCE through Twig sandbox escape8.7 High
- weblateorg weblateWeblate path traversal allows a project administrator to read arbitrary files via App store metadata download (Incomplete Fix of CVE-2026-34242)7.7 High
- google chromeProtection mechanism failure in HttpsUpgrades in Google Chrome prior to 152.0.7977.65 allowed a...4.3 Medium
- apple ipados, macos, safari +2 more +4 moreA Content Security Policy bypass was addressed with improved enforcement in AudioWorklet contexts...8.8 High
- nvidia dgx spark, dgx spark uefi +1 moreNVIDIA DGX Spark contains a vulnerability in UEFI where a Attacker may cause a/an CWE-693 by...6.0 Medium
- nltkNLTK before 3.10.3 Remote Code Execution via Unsafe Pickle Deserialization9.3 Critical
- ibm mcp-context-forgeMCP Context Forge: RestrictedPython sandbox bypass via getattr builtin in python_sandbox_server10.0 Critical
- veracryptVeraCrypt: Hidden volume quick format weakens plausible deniability4.6 Medium
- wintercms winterWinter CMS before 1.2.13 Twig Sandbox Escape via SecurityPolicy9.3 Critical
- lmfit astevalasteval sandbox escape: arbitrary native memory read/write via numpy ctypes in default asteval Interpreter5.5 Medium
- red hat advanced cluster management for kubernetes 2.11, advanced cluster management for kubernetes 2.13, advanced cluster management for kubernetes 2.14 +3 more +5 moreSearch-indexer: search-indexer: update/delete operations not scoped to caller's cluster (cross-tenant data tampering)6.8 Medium
- truelockmc streambertStreambert: Global CSP Removal in Wyzie Redeem Window Enables Unconstrained XSS in Electron Renderer6.9 Medium
- triliumnext triliumTrilium: Stored XSS in note icon rendering leads to Remote Code Execution in Electron desktop app8.3 High
- mozilla firefox, thunderbird +1 moreSandbox escape in the Remote Settings Client component10.0 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the JavaScript: GC component9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Data Loss Prevention component8.1 High
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Storage: Cache API component9.1 Critical
- mozilla firefox, thunderbird +1 moreMitigation bypass in the Safe Browsing component8.1 High
- Show moreLoading…