CWE-276 · Incorrect Default Permissions (page 2)
Page 2 of 16 — CVEs classified under CWE-276, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-57849 | Medium | 6.4 | 2026-03-13 | A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permission… |
CVE-2026-3315 | High | 7.8 | 2026-03-10 | Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Vis… |
CVE-2026-26131 | High | 7.8 | 2026-03-10 | Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally. |
CVE-2026-28267 | Medium | 5.5 | 2026-03-10 | Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup d… |
CVE-2026-28727 | High | 7.8 | 2026-03-06 | Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, A… |
CVE-2026-28717 | Medium | 5.0 | 2026-03-06 | Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186. |
CVE-2026-26034 | High | 7.8 | 2026-03-05 | UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to e… |
CVE-2026-21423 | Medium | 6.7 | 2026-03-04 | Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privi… |
CVE-2026-2915 | High | 7.1 | 2026-03-03 | HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP S… |
CVE-2026-27653 | Medium | 6.7 | 2026-02-27 | The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be… |
CVE-2026-23703 | High | 7.8 | 2026-02-26 | The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute… |
CVE-2025-1789 | High | 7.8 | 2026-02-24 | Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileg… |
CVE-2026-2026 | Medium | 6.1 | 2026-02-13 | A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially per… |
CVE-2025-36522 | Medium | 6.7 | 2026-02-10 | Incorrect default permissions for some Intel(R) Chipset Software before version 10.1.20266.8668 or later. within Ring 3: User Applications may allow an escalat… |
CVE-2025-36511 | Medium | 6.7 | 2026-02-10 | Incorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privil… |
CVE-2025-32453 | Medium | 6.7 | 2026-02-10 | Incorrect default permissions for some Intel(R) Graphics Driver software within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged s… |
CVE-2025-31655 | Medium | 6.7 | 2026-02-10 | Incorrect default permissions for some Intel(R) Battery Life Diagnostic Tool within Ring 3: User Applications may allow an escalation of privilege. Unprivilege… |
CVE-2025-22849 | Medium | 6.7 | 2026-02-10 | Incorrect default permissions for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00… |
CVE-2026-25931 | High | 7.8 | 2026-02-09 | vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings._determineIsTrusted treats the configu… |
CVE-2020-37160 | Medium | 6.2 | 2026-02-07 | SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local… |
CVE-2025-15343 | Medium | 6.5 | 2026-02-05 | Tanium addressed an incorrect default permissions vulnerability in Enforce. |
CVE-2025-15341 | Medium | 6.5 | 2026-02-05 | Tanium addressed an incorrect default permissions vulnerability in Benchmark. |
CVE-2025-15340 | Medium | 6.5 | 2026-02-05 | Tanium addressed an incorrect default permissions vulnerability in Comply. |
CVE-2025-15339 | Medium | 6.5 | 2026-02-05 | Tanium addressed an incorrect default permissions vulnerability in Discover. |
CVE-2025-15338 | Medium | 6.5 | 2026-02-05 | Tanium addressed an incorrect default permissions vulnerability in Partner Integration. |
CVE-2025-15337 | Medium | 6.5 | 2026-02-05 | Tanium addressed an incorrect default permissions vulnerability in Patch. |
CVE-2025-15336 | Medium | 6.5 | 2026-02-05 | Tanium addressed an incorrect default permissions vulnerability in Performance. |
CVE-2025-15335 | Medium | 4.3 | 2026-02-05 | Tanium addressed an information disclosure vulnerability in Threat Response. |
CVE-2025-15334 | Medium | 4.3 | 2026-02-05 | Tanium addressed an information disclosure vulnerability in Threat Response. |
CVE-2025-15333 | Medium | 4.3 | 2026-02-05 | Tanium addressed an information disclosure vulnerability in Threat Response. |
CVE-2020-37129 | Critical | 9.8 | 2026-02-05 | Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can… |
CVE-2025-10314 | High | 8.8 | 2026-02-05 | Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to exe… |
CVE-2025-69604 | High | 7.8 | 2026-01-29 | An issue in Shirt Pocket's SuperDuper! 3.11 and earlier allow a local attacker to modify the default task template to install an arbitrary package that can run… |
CVE-2026-24780 | High | 8.8 | 2026-01-29 | AutoGPT is a platform that allows users to create, deploy, and manage continuous artificial intelligence agents that automate complex workflows. Prior to autog… |
CVE-2026-24414 | Medium | 5.5 | 2026-01-29 | The Icinga PowerShell Framework provides configuration and check possibilities to ensure integration and monitoring of Windows environments. In versions prior… |
CVE-2026-24413 | Medium | 5.5 | 2026-01-29 | Icinga 2 is an open source monitoring system. Starting in version 2.3.0 and prior to versions 2.13.14, 2.14.8, and 2.15.2, the Icinga 2 MSI did not set appropr… |
CVE-2025-13905 | | 2026-01-29 | CWE-276: Incorrect Default Permissions vulnerability exists that could cause privilege escalation through the reverse shell when one or more executable servi… | |
CVE-2026-0705 | Medium | 6.7 | 2026-01-27 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Cloud Manager (Windows) before build 6.4.25342.354. |
CVE-2025-67230 | High | 7.1 | 2026-01-23 | Improper permissions in the handler for the Custom URL Scheme in ToDesktop Builder v0.33.0 allows attackers with renderer-context access to invoke external pro… |
CVE-2025-15523 | | 2026-01-22 | MacOS version of Inkscape bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permissions granted by the user to the main a… | |
CVE-2021-47852 | High | 8.8 | 2026-01-21 | Rockstar Games Launcher 1.0.37.349 contains a privilege escalation vulnerability that allows authenticated users to modify the service executable with weak per… |
CVE-2025-55132 | Medium | 5.3 | 2026-01-20 | A flaw in Node.js's permission model allows a file's access and modification timestamps to be changed via `futimes()` even when the process has only read permi… |
CVE-2021-47761 | High | 7.8 | 2026-01-15 | MilleGPG5 5.7.2 contains a local privilege escalation vulnerability that allows authenticated users to modify service executable files in the MariaDB bin direc… |
CVE-2025-67813 | Medium | 5.3 | 2026-01-12 | Quest KACE Desktop Authority through 11.3.1 has Insecure Permissions on the Named Pipes used for inter-process communication |
CVE-2025-60262 | Critical | 9.8 | 2026-01-06 | An issue in H3C M102G HM1A0V200R010 wireless controller and BA1500L SWBA1A0V100R006 wireless access point, there is a misconfiguration vulnerability about vsft… |
CVE-2025-64724 | High | 7.3 | 2025-12-18 | Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS is installed with world-writable file permissions on sensit… |
CVE-2025-64723 | Medium | 4.4 | 2025-12-18 | Arduino IDE is an integrated development environment. Prior to version 2.3.7, Arduino IDE for macOS was configured with overly permissive security entitlements… |
CVE-2025-53919 | High | 7.8 | 2025-12-17 | An issue was discovered in the Portrait Dell Color Management application through 3.3.008 for Dell monitors, It creates a temporary folder, with weak permissio… |
CVE-2025-53398 | High | 7.8 | 2025-12-17 | The Portrait Dell Color Management application 3.3.8 for Dell monitors has Insecure Permissions, |
CVE-2025-43519 | Medium | 5.5 | 2025-12-12 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.3, macOS Sonoma 14.8.3, macOS Tahoe 26.2. An app may… |
CVE-2025-13155 | High | 7.8 | 2025-12-10 | An improper permissions vulnerability was reported in Lenovo Baiying Client that could allow a local authenticated user to execute code with elevated privilege… |
CVE-2025-59030 | High | 7.5 | 2025-12-09 | An attacker can trigger the removal of cached records by sending a NOTIFY query over TCP. |
CVE-2025-57850 | Medium | 6.4 | 2025-12-02 | A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being created with group-wri… |
CVE-2025-61229 | High | 7.8 | 2025-12-01 | An issue in Shirt Pocket's SuperDuper! 3.10 and earlier allow a local attacker to modify the default task template to execute an arbitrary preflight script wit… |
CVE-2025-59485 | Low | 3.3 | 2025-11-25 | Incorrect default permissions issue exists in Security Point (Windows) of MaLion prior to Ver.5.3.4. If this vulnerability is exploited, an arbitrary file coul… |
CVE-2025-54866 | Medium | 5.5 | 2025-11-21 | Wazuh is a free and open source platform used for threat prevention, detection, and response. From version 4.3.0 to before 4.13.0, a missing ACL on "C:\Program… |
CVE-2025-58097 | High | 7.8 | 2025-11-21 | The installation directory of LogStare Collector is configured with incorrect access permissions. A non-administrative user may manipulate files within the ins… |
CVE-2025-34333 | High | 7.8 | 2025-11-19 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 configure the web document root at C:\\F2MAdmin\\F2E with overly pe… |
CVE-2025-34332 | High | 7.8 | 2025-11-19 | AudioCodes Fax Server and Auto-Attendant IVR appliances versions up to and including 2.6.23 include a web administration component that controls back-end Windo… |
CVE-2025-54990 | Medium | 5.3 | 2025-11-18 | XWiki AdminTools integrates administrative tools for managing a running XWiki instance. Prior to version 1.1, users without admin rights have access to AdminTo… |
CVE-2025-12792 | Low | 3.2 | 2025-11-18 | The Mac App Store distribution of the Canva for Mac desktop app before 1.117.1 was built without Hardened Runtime. A local threat actor with unprivileged acces… |
CVE-2025-13193 | Medium | 5.5 | 2025-11-17 | A flaw was found in libvirt. External inactive snapshots for shut-down VMs are incorrectly created as world-readable, making it possible for unprivileged users… |
CVE-2025-13131 | High | 7.8 | 2025-11-13 | A vulnerability was found in Sonarr 4.0.15.2940. The impacted element is an unknown function of the file C:\ProgramData\Sonarr\bin\Sonarr.Console.exe of the co… |
CVE-2025-13130 | High | 7.8 | 2025-11-13 | A vulnerability has been found in Radarr 5.28.0.10274. The affected element is an unknown function of the file C:\ProgramData\Radarr\bin\Radarr.Console.exe of… |
CVE-2025-8485 | High | 7.3 | 2025-11-12 | An improper permissions vulnerability was reported in Lenovo App Store that could allow a local authenticated user to execute code with elevated privileges dur… |
CVE-2025-8421 | Medium | 6.6 | 2025-11-12 | An improper default permission vulnerability was reported in Lenovo Dock Manager that, under certain conditions during installation, could allow an authenticat… |
CVE-2025-61667 | | 2025-11-12 | The Datadog Agent collects events and metrics from hosts and sends them to Datadog. A vulnerability within the Datadog Linux Host Agent versions 7.65.0 through… | |
CVE-2025-11567 | | 2025-11-12 | CWE-276: Incorrect Default Permissions vulnerability exists that could cause elevated system access when the target installation folder is not properly secured. | |
CVE-2025-32091 | High | 8.2 | 2025-11-11 | Incorrect default permissions in some firmware for the Intel(R) Arc(TM) B-series GPUs within Ring 1: Device Drivers may allow an escalation of privilege. Syste… |
CVE-2025-31940 | Medium | 6.7 | 2025-11-11 | Incorrect default permissions for some Intel(R) Thread Director Visualizer software before version 1.1.1 within Ring 3: User Applications may allow an escalati… |
CVE-2025-30518 | Medium | 6.7 | 2025-11-11 | Incorrect default permissions for some Intel(R) PresentMon before version 2.3.1 within Ring 3: User Applications may allow an escalation of privilege. Unprivil… |
CVE-2025-27711 | Medium | 6.7 | 2025-11-11 | Incorrect default permissions for some Intel(R) One Boot Flash Update (Intel(R) OFU) software before version 14.1.31 within Ring 3: User Applications may allow… |
CVE-2025-27246 | Medium | 6.7 | 2025-11-11 | Incorrect default permissions for the Intel(R) Processor Identification Utility before version 8.0.43 within Ring 3: User Applications may allow an escalation… |
CVE-2025-13025 | High | 7.5 | 2025-11-11 | Incorrect boundary conditions in the Graphics: WebGPU component. This vulnerability was fixed in Firefox 145 and Thunderbird 145. |
CVE-2025-10918 | High | 7.1 | 2025-11-11 | Insecure default permissions in the agent of Ivanti Endpoint Manager before version 2024 SU4 allows a local authenticated attacker to write arbitrary files any… |
CVE-2025-64436 | Medium | 5.3 | 2025-11-07 | KubeVirt is a virtual machine management add-on for Kubernetes. In 1.5.0 and earlier, the permissions granted to the virt-handler service account, such as the… |
CVE-2025-43507 | Medium | 6.5 | 2025-11-04 | A privacy issue was addressed by moving sensitive data. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1, vision… |
CVE-2025-43444 | Medium | 5.3 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1, macOS Tahoe 26.1… |
CVE-2025-43442 | Low | 3.3 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.7.2 and iPadOS 18.7.2, iOS 26.1 and iPadOS 26.1. An app may be ab… |
CVE-2025-43350 | Low | 2.4 | 2025-11-04 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1. An attacker may be able to view restricted con… |
CVE-2025-8432 | High | 8.4 | 2025-10-27 | Incorrect Default Permissions vulnerability in Centreon Infra Monitoring (MBI modules) allows Embedding Scripts within Scripts by CentreonBI user account on th… |
CVE-2025-46185 | Medium | 6.2 | 2025-10-24 | An Insecure Permission vulnerability in pgcodekeeper 10.12.0 allows a local attacker to obtain sensitive information via the plaintext storage of passwords and… |
CVE-2025-12100 | High | 7.8 | 2025-10-23 | Incorrect Default Permissions vulnerability in MongoDB BI Connector ODBC driver allows Privilege Escalation.This issue affects BI Connector ODBC driver: from 1… |
CVE-2025-57848 | Medium | 6.4 | 2025-10-23 | A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created wit… |
CVE-2025-23347 | High | 7.8 | 2025-10-23 | NVIDIA Project G-Assist contains a vulnerability where an attacker might be able to escalate permissions. A successful exploit of this vulnerability might lead… |
CVE-2025-11575 | High | 7.8 | 2025-10-23 | Incorrect Default Permissions vulnerability in MongoDB Atlas SQL ODBC driver on Windows allows Privilege Escalation.This issue affects MongoDB Atlas SQL ODBC d… |
CVE-2025-58712 | Medium | 6.4 | 2025-10-22 | A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable perm… |
CVE-2025-61035 | High | 7.7 | 2025-10-22 | The seffaflik thru 0.0.9 is vulnerable to symlink attacks due to incorrect default permissions given to the .kimlik file and .seffaflik file, which is created… |
CVE-2025-62661 | | 2025-10-21 | Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - Thanks Extension, Mediawiki - Growth Experiments Extension allows Accessing… | |
CVE-2025-62577 | High | 8.8 | 2025-10-20 | ETERNUS SF provided by Fsas Technologies Inc. contains an incorrect default permissions vulnerability. A low-privileged user with access to the management serv… |
CVE-2025-62668 | | 2025-10-18 | Incorrect Default Permissions vulnerability in The Wikimedia Foundation Mediawiki - GrowthExperiments Extension allows Resource Leak Exposure.This issue affect… | |
CVE-2025-35062 | Medium | 5.3 | 2025-10-09 | Newforma Info Exchange (NIX) before version 2023.1 by default allows anonymous authentication which allows an unauthenticated attacker to exploit additional vu… |
CVE-2025-11535 | | 2025-10-08 | MongoDB Connector for BI installation via MSI on Windows leaves ACLs unset on custom install directories allows Privilege Escalation.This issue affects MongoDB… | |
CVE-2025-54086 | Low | 3.3 | 2025-10-02 | CVE-2025-54086 is an excess permissions vulnerability in the Warehouse component of Absolute Secure Access prior to version 14.10. Attackers with access to the… |
CVE-2025-23297 | High | 7.8 | 2025-10-01 | NVIDIA Installer for NvAPP for Windows contains a vulnerability in the FrameviewSDK installation process, where an attacker with local unprivileged access coul… |
CVE-2025-57852 | Medium | 6.4 | 2025-09-30 | A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writa… |
CVE-2025-36857 | Low | 3.3 | 2025-09-25 | Rapid7 Appspider Pro versions below 7.5.021, suffer from a broken access control vulnerability in the application's configuration file loading mechanism, where… |
CVE-2025-34191 | High | 8.4 | 2025-09-19 | Vasion Print (formerly PrinterLogic) Virtual Appliance Host versions prior to 22.0.843 and Application prior to 20.0.1923 (macOS/Linux client deployments) cont… |
CVE-2025-53947 | High | 7.7 | 2025-09-18 | A local attacker with low privileges on the Windows system where the software is installed can exploit this vulnerability to corrupt sensitive data. A data f… |
CVE-2025-57625 | High | 8.8 | 2025-09-16 | CYRISMA Sensor before 444 for Windows has an Insecure Folder and File Permissions vulnerability. A low-privileged user can abuse these issues to escalate privi… |