CWE-276 · Incorrect Default Permissions (page 4)
Page 4 of 16 — CVEs classified under CWE-276, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2025-2782 | | 2025-03-28 | The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow… | |
CVE-2025-2781 | | 2025-03-28 | The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could al… | |
CVE-2025-25535 | Critical | 9.8 | 2025-03-26 | HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted request. |
CVE-2024-53351 | Critical | 9.8 | 2025-03-21 | Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges. |
CVE-2025-27612 | Medium | 5.9 | 2025-03-21 | libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilit… |
CVE-2025-24915 | High | 7.8 | 2025-03-21 | When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-dire… |
CVE-2024-54564 | Medium | 6.5 | 2025-03-21 | This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received f… |
CVE-2024-0245 | Medium | 5.5 | 2025-03-20 | A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious application… |
CVE-2025-27926 | Medium | 4.3 | 2025-03-10 | In Nintex Automation 5.6 and 5.7 before 5.8, the K2 SmartForms Designer folder has configuration files (web.config) containing passwords that are readable by u… |
CVE-2025-20910 | Medium | 6.2 | 2025-03-06 | Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery. |
CVE-2025-24864 | High | 7.8 | 2025-03-06 | Incorrect access permission of a specific folder issue exists in RemoteView Agent (for Windows) versions prior to v8.1.5.2. If this vulnerability is exploited… |
CVE-2025-22447 | High | 7.8 | 2025-03-06 | Incorrect access permission of a specific service issue exists in RemoteView Agent (for Windows) versions prior to v8.1.5.2. If this vulnerability is exploited… |
CVE-2025-27682 | Critical | 9.8 | 2025-03-05 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 allows Insecure Log Permissions V-2022-005. |
CVE-2025-27677 | Critical | 9.8 | 2025-03-05 | Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Symbolic Links For Unprivileged File Interaction V-202… |
CVE-2025-27521 | Medium | 6.8 | 2025-03-04 | Vulnerability of improper access permission in the process management module Impact: Successful exploitation of this vulnerability may affect service confident… |
CVE-2024-58050 | Medium | 6.2 | 2025-03-04 | Vulnerability of improper access permission in the HDC module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-58049 | Medium | 5.0 | 2025-03-04 | Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-58047 | Medium | 5.0 | 2025-03-04 | Permission verification vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-58046 | Medium | 6.2 | 2025-03-04 | Permission management vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect service confidentiality. |
CVE-2024-58044 | High | 8.4 | 2025-03-04 | Permission verification bypass vulnerability in the notification module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2025-27154 | Critical | 9.8 | 2025-02-27 | Spotipy is a lightweight Python library for the Spotify Web API. The `CacheHandler` class creates a cache file to store the auth token. Prior to version 2.25.1… |
CVE-2024-56525 | Critical | 9.8 | 2025-02-24 | In Public Knowledge Project (PKP) OJS, OMP, and OPS before 3.3.0.21 and 3.4.x before 3.4.0.8, an XXE attack by the Journal Editor Role can create a new role as… |
CVE-2025-21106 | Medium | 5.5 | 2025-02-20 | Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit t… |
CVE-2024-57604 | Critical | 9.8 | 2025-02-12 | An issue in MaysWind ezBookkeeping 0.7.0 allows a remote attacker to escalate privileges via the token component. |
CVE-2024-51440 | High | 7.8 | 2025-02-12 | An issue in Nothing Tech Nothing OS v.2.6 allows a local attacker to escalate privileges via the NtBpfService component. |
CVE-2024-42419 | Medium | 6.7 | 2025-02-12 | Incorrect default permissions for some Intel(R) GPA and Intel(R) GPA Framework software installers may allow an authenticated user to potentially enable escala… |
CVE-2024-32942 | Medium | 6.7 | 2025-02-12 | Incorrect default permissions for some Intel(R) DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escala… |
CVE-2023-31360 | High | 7.3 | 2025-02-11 | Incorrect default permissions in the AMD Integrated Management Technology (AIM-T) Manageability Service installation directory could allow an attacker to achie… |
CVE-2024-55215 | Critical | 9.8 | 2025-02-07 | An issue in trojan v.2.0.0 through v.2.15.3 allows a remote attacker to escalate privileges via the initialization interface /auth/register. |
CVE-2024-11468 | High | 7.8 | 2025-02-04 | Omnissa Horizon Client for macOS contains a Local privilege escalation (LPE) Vulnerability due to a flaw in the installation process. Successful exploitation o… |
CVE-2025-24891 | Critical | 9.6 | 2025-01-31 | Dumb Drop is a file upload application. Users with permission to upload to the service are able to exploit a path traversal vulnerability to overwrite arbitrar… |
CVE-2025-24795 | Medium | 4.4 | 2025-01-29 | The Snowflake Connector for Python provides an interface for developing Python applications that can connect to Snowflake and perform all standard operations… |
CVE-2025-24788 | Medium | 5.0 | 2025-01-29 | snowflake-connector-net is the Snowflake Connector for .NET. Snowflake discovered and remediated a vulnerability in the Snowflake Connector for .NET in which f… |
CVE-2025-24790 | Medium | 4.4 | 2025-01-29 | Snowflake JDBC provides a JDBC type 4 driver that supports core functionality, allowing Java program to connect to Snowflake. Snowflake discovered and remediat… |
CVE-2025-0797 | Low | 3.3 | 2025-01-29 | A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been declared as problematic. This vulnerability affects unknown code of the fi… |
CVE-2025-24826 | Medium | 6.7 | 2025-01-28 | Local privilege escalation due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4625. |
CVE-2024-57548 | Critical | 9.1 | 2025-01-27 | CMSimple 5.16 allows the user to edit log.php file via print page. |
CVE-2025-24176 | High | 7.1 | 2025-01-27 | A permissions issue was addressed with improved validation. This issue is fixed in macOS Sequoia 15.3, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. A local attac… |
CVE-2025-24140 | Medium | 5.3 | 2025-01-27 | This issue was addressed through improved state management. This issue is fixed in macOS Sequoia 15.3. Files downloaded from the internet may not have the quar… |
CVE-2025-24135 | High | 7.8 | 2025-01-27 | This issue was addressed with improved message validation. This issue is fixed in macOS Sequoia 15.3. An app may be able to gain elevated privileges. |
CVE-2025-24107 | High | 7.8 | 2025-01-27 | A permissions issue was addressed with additional restrictions. This issue is fixed in iOS 18.3 and iPadOS 18.3, macOS Sequoia 15.3, tvOS 18.3, watchOS 11.3. A… |
CVE-2025-24093 | Critical | 9.8 | 2025-01-27 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.3, macOS Ventura 13.7.3. An app ma… |
CVE-2025-0543 | High | 7.8 | 2025-01-25 | Local privilege escalation in G DATA Security Client due to incorrect assignment of privileges to directories. This vulnerability allows a local, unprivileged… |
CVE-2025-0542 | High | 7.8 | 2025-01-25 | Local privilege escalation due to incorrect assignment of privileges of temporary files in the update mechanism of G DATA Management Server. This vulnerability… |
CVE-2024-55930 | Medium | 6.7 | 2025-01-23 | Xerox Workplace Suite has weak default folder permissions that allow unauthorized users to access, modify, or delete files |
CVE-2024-55957 | High | 7.8 | 2025-01-22 | In Thermo Fisher Scientific Xcalibur before 4.7 SP1 and Thermo Foundation Instrument Control Software (ICSW) before 3.1 SP10, the driver packages have a local… |
CVE-2025-24399 | High | 8.8 | 2025-01-22 | Jenkins OpenId Connect Authentication Plugin 4.452.v2849b_d3945fa_ and earlier, except 4.438.440.v3f5f201de5dc, treats usernames as case-insensitive, allowing… |
CVE-2024-49744 | High | 7.8 | 2025-01-21 | In checkKeyIntentParceledCorrectly of AccountManagerService.java, there is a possible way to bypass parcel mismatch mitigation due to unsafe deserialization… |
CVE-2024-49737 | High | 7.8 | 2025-01-21 | In applyTaskFragmentOperation of WindowOrganizerController.java, there is a possible way to launch arbitrary activities as the system UID due to a logic error… |
CVE-2024-49735 | High | 7.8 | 2025-01-21 | In multiple locations, there is a possible failure to persist permissions settings due to resource exhaustion. This could lead to local escalation of privilege… |
CVE-2024-49732 | High | 7.8 | 2025-01-21 | In multiple functions of CompanionDeviceManagerService.java, there is a possible way to grant permissions without user consent due to a missing permission chec… |
CVE-2024-49724 | High | 7.0 | 2025-01-21 | In multiple functions of AccountManagerService.java, there is a possible way to bypass permissions and launch protected activities due to a race condition. Thi… |
CVE-2024-43765 | High | 7.8 | 2025-01-21 | In multiple locations, there is a possible way to obtain access to a folder due to a tapjacking/overlay attack. This could lead to local escalation of privileg… |
CVE-2024-34730 | High | 7.8 | 2025-01-21 | In multiple locations, there is a possible bypass of user consent to enabling new Bluetooth HIDs due to a logic error in the code. This could lead to local esc… |
CVE-2023-40132 | High | 7.8 | 2025-01-21 | In setActualDefaultRingtoneUri of RingtoneManager.java, there is a possible way to bypass content providers read permissions due to a missing permission check… |
CVE-2025-21532 | High | 7.8 | 2025-01-21 | Vulnerability in the Oracle Analytics Desktop product of Oracle Analytics (component: Install). Supported versions that are affected are Prior to 8.1.0. Easil… |
CVE-2024-55959 | Critical | 9.1 | 2025-01-21 | Northern.tech Mender Client 4.x before 4.0.5 has Insecure Permissions. |
CVE-2018-9401 | High | 7.8 | 2025-01-18 | In many locations, there is a possible way to access kernel memory in user space due to an incorrect bounds check. This could lead to local escalation of privi… |
CVE-2018-9434 | High | 7.8 | 2025-01-17 | In multiple functions of Parcel.cpp, there is a possible way to bypass address space layout randomization. This could lead to local escalation of privilege wit… |
CVE-2024-40514 | Medium | 4.6 | 2025-01-16 | Insecure Permissions vulnerability in themesebrand Chatvia v.5.3.2 allows a remote attacker to escalate privileges via the User profile name and image upload f… |
CVE-2024-57684 | Critical | 9.8 | 2025-01-16 | An access control issue in the component formDMZ.cgi of D-Link 816A2_FWv1.10CNB05_R1B011D88210 allows unauthenticated attackers to set the DMZ service of the d… |
CVE-2024-52783 | Medium | 5.1 | 2025-01-15 | Insecure permissions in the XNetSocketClient component of XINJE XDPPro.exe v3.2.2 to v3.7.17c allows attackers to execute arbitrary code via modification of th… |
CVE-2024-46464 | High | 7.8 | 2025-01-09 | In PRIMX ZED Enterprise up to 2024.3, technical files stored in local folders with common user access can be manipulated to render the host computer unavailabl… |
CVE-2024-55225 | Critical | 9.8 | 2025-01-09 | An issue in the component src/api/identity.rs of Vaultwarden prior to v1.32.5 allows attackers to impersonate users, including Administrators, via a crafted au… |
CVE-2024-46505 | Critical | 9.1 | 2025-01-09 | Infoblox BloxOne v2.4 was discovered to contain a business logic flaw due to thick client vulnerabilities. |
CVE-2023-1907 | High | 8.0 | 2025-01-09 | A vulnerability was found in pgadmin. Users logging into pgAdmin running in server mode using LDAP authentication may be attached to another user's session if… |
CVE-2024-13206 | High | 7.8 | 2025-01-09 | A vulnerability classified as critical has been found in REVE Antivirus 1.0.0.0 on Linux. This affects an unknown part of the file /usr/local/reveantivirus/tmp… |
CVE-2024-13188 | Medium | 5.3 | 2025-01-08 | A vulnerability was found in MicroWorld eScan Antivirus 7.0.32 on Linux. It has been rated as critical. Affected by this issue is some unknown functionality of… |
CVE-2024-56447 | High | 7.8 | 2025-01-08 | Vulnerability of improper permission control in the window management module Impact: Successful exploitation of this vulnerability may affect service confident… |
CVE-2024-56440 | Medium | 6.2 | 2025-01-08 | Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally. |
CVE-2023-52954 | Medium | 4.4 | 2025-01-08 | Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability. |
CVE-2022-41572 | Critical | 9.8 | 2025-01-07 | An issue was discovered in EyesOfNetwork (EON) through 5.3.11. Privilege escalation can be accomplished on the server because nmap can be run as root. The atta… |
CVE-2021-27285 | High | 8.4 | 2025-01-06 | An issue was discovered in Inspur ClusterEngine v4.0 that allows attackers to gain escalated Local privileges and execute arbitrary commands via /opt/tsce4/tor… |
CVE-2024-53841 | High | 7.8 | 2025-01-03 | In startListeningForDeviceStateChanges, there is a possible Permission Bypass due to a confused deputy. This could lead to local escalation of privilege with n… |
CVE-2024-53840 | High | 7.8 | 2025-01-03 | there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges nee… |
CVE-2024-53835 | High | 7.8 | 2025-01-03 | there is a possible biometric bypass due to an unusual root cause. This could lead to local escalation of privilege with no additional execution privileges nee… |
CVE-2024-11624 | High | 7.8 | 2025-01-03 | there is a possible to add apps to bypass VPN due to Undeclared Permission . This could lead to local escalation of privilege with no additional execution priv… |
CVE-2024-43769 | High | 7.8 | 2025-01-03 | In isPackageDeviceAdmin of PackageManagerService.java, there is a possible edge case which could prevent the uninstallation of CloudDpc due to a logic error in… |
CVE-2021-37000 | High | 7.7 | 2024-12-28 | Some Huawei wearables have a permission management vulnerability. |
CVE-2024-55950 | | 2024-12-26 | Tabby (formerly Terminus) is a highly configurable terminal emulator. Prior to 1.0.216, Tabby terminal emulator contains overly permissive entitlements that ar… | |
CVE-2024-12903 | High | 7.8 | 2024-12-23 | Incorrect default permissions vulnerability in Evoko Home, affecting version 2.4.2 to 2.7.4. A non-admin user could exploit weak file and folder permissions to… |
CVE-2024-45819 | Medium | 5.5 | 2024-12-19 | PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into gues… |
CVE-2024-4229 | High | 7.8 | 2024-12-19 | Incorrect Default Permissions vulnerability in Edgecross Basic Software for Windows versions 1.00 and later and Edgecross Basic Software for Developers version… |
CVE-2024-49202 | High | 7.6 | 2024-12-18 | Keyfactor Command before 12.5.0 has Incorrect Access Control: access tokens are over permissioned, aka 64099. The fixed versions are 11.5.1.1, 11.5.2.1, 11.5.3… |
CVE-2024-38499 | High | 8.8 | 2024-12-17 | CA Client Automation (ITCM) allows non-admin/non-root users to encrypt a string using CAF CLI and SD_ACMD CLI. This would allow the non admin user to access th… |
CVE-2024-12564 | | 2024-12-12 | Exposure of Sensitive Information to an Unauthorized Actor vulnerability was discovered in Open Design Alliance CDE inWEB SDK before 2025.3. Installing CDE Ser… | |
CVE-2024-44224 | High | 7.8 | 2024-12-12 | A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.2, macOS Sonoma 14.7.2, macOS Ventura 13.7.2. A malicio… |
CVE-2024-11872 | High | 7.8 | 2024-12-12 | Epic Games Launcher Incorrect Default Permissions Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on… |
CVE-2024-9845 | High | 7.8 | 2024-12-11 | Under specific circumstances, insecure permissions in Ivanti Automation before version 2024.4.0.1 allows a local authenticated attacker to achieve local privil… |
CVE-2024-8496 | High | 7.8 | 2024-12-11 | Under specific circumstances, insecure permissions in Ivanti Workspace Control before version 10.18.40.0 allows a local authenticated attacker to achieve local… |
CVE-2024-11598 | High | 7.8 | 2024-12-11 | Under specific circumstances, insecure permissions in Ivanti Application Control before version 2024.3 HF1, 2024.1 HF2, or 2023.3 HF3 allows a local authentica… |
CVE-2024-11597 | High | 7.8 | 2024-12-11 | Under specific circumstances, insecure permissions in Ivanti Performance Manager before version 2024.3 HF1, 2024.1 HF1, or 2023.3 HF1 allows a local authentica… |
CVE-2024-10251 | High | 7.8 | 2024-12-11 | Under specific circumstances, insecure permissions in Ivanti Security Controls before version 2024.4.1 allows a local authenticated attacker to achieve local p… |
CVE-2024-45494 | Critical | 9.8 | 2024-12-10 | An issue was discovered in MSA FieldServer Gateway 5.0.0 through 6.5.2 (Fixed in 7.0.0). The FieldServer Gateway has an internally used shared administrative u… |
CVE-2024-54751 | Critical | 9.8 | 2024-12-10 | COMFAST CF-WR630AX v2.7.0.2 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. |
CVE-2024-54747 | Critical | 9.8 | 2024-12-06 | WAVLINK WN531P3 202383 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. |
CVE-2024-54745 | Critical | 9.8 | 2024-12-06 | WAVLINK WN701AE M01AE_V240305 was discovered to contain a hardcoded password vulnerability in /etc/shadow, which allows attackers to log in as root. |
CVE-2024-46624 | High | 8.8 | 2024-12-03 | An issue in InfoDom Performa 365 v4.0.1 allows authenticated attackers to elevate their privileges to Administrator via a crafted payload sent to /api/users. |
CVE-2024-54131 | | 2024-12-03 | The Kolide Agent (aka: Launcher) is the lightweight agent designed to work with Kolide's service. An implementation bug in the Kolide Agent (known as `launcher… | |
CVE-2024-53921 | Low | 2.8 | 2024-12-03 | An issue was discovered in the installer in Samsung Magician 8.1.0 on Windows. An attacker can create arbitrary folders in the system permission directory via… |