CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...6.5 Medium
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...3.1 Low
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...2.5 Low
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...4.3 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.5 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.5 Medium
- google chromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeImproper input validation in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...6.5 Medium
- google chromeMemory corruption in Loader in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Actor in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Media in Google Chrome on on Windows prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in Prompts in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in DevTools in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in HTML in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in WebAppInstalls in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in WebProtect in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in CustomTabs in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeImproper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...9.6 Critical
- google chromeImproper input validation in FullScreen in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeUse after free in SignIn in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Cookies in Google Chrome on on Android prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper input validation in PrintPreview in Google Chrome prior to 156.0.8078.47 allowed a...9.6 Critical
- google chromeMemory corruption in Transactions Platform in Google Chrome prior to 156.0.8078.47 allowed a...6.5 Medium
- google chromeUse after free in FileSystem in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Core in Google Chrome on on Mac prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeUse after free in Workers in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeOut of bounds read in SiteIsolation in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeMemory corruption in Autofill in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...6.5 Medium
- google chromeMemory corruption in WebUI in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote...9.6 Critical
- google chromeMemory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeUse after free in API in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a...8.8 High
- google chromeUse after free in SiteIsolation in Google Chrome on on Android prior to 156.0.8078.47 allowed a...8.8 High
- google chromeMemory corruption in FedCM in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeMemory corruption in PerformanceAPIs in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeMemory corruption in CSS in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...6.5 Medium
- google chromeMemory corruption in Navigation in Google Chrome on on iOS prior to 156.0.8078.47 allowed a...6.5 Medium
- google chromeMemory corruption in Sandbox in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- google chromeImproper input validation in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...8.8 High
- google chromeImproper access control in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote...6.5 Medium
- google chromeUse after free in Extensions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker to...8.8 High
- Show moreLoading…