CWE-501 · Trust Boundary Violation

32 CVEs classified under CWE-501 (Trust Boundary Violation). Browse by severity and year.

Top CVEs for CWE-501
CVESeverityScorePublishedSummary
CVE-2026-35051Critical10.02026-04-30Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traef…
CVE-2026-25725Critical10.02026-02-06Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.js…
CVE-2025-48938Critical9.82025-05-30go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 wh…
CVE-2026-44091Critical9.12026-07-30An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration…
CVE-2026-48746Critical9.12026-06-22vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on…
CVE-2026-27893High8.82026-03-27vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.18.0, two model implementation file…
CVE-2024-49050High8.82024-11-12Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2026-4687High8.62026-03-24Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 14…
CVE-2026-34780High8.32026-04-04Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 39.0.0-alpha.1 to before 39.8.0, 40.0.0-a…
CVE-2023-28597High8.32023-03-27Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later…
CVE-2024-23682High8.22024-01-19Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An atta…
CVE-2026-33828High7.82026-06-09Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.
CVE-2025-49714High7.82025-07-08Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
CVE-2020-4076High7.82020-07-07In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can rea…
CVE-2020-4077High7.72020-07-07In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can rea…
CVE-2024-3661High7.62024-05-06DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traff…
CVE-2025-14542High7.52025-12-13The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially se…
CVE-2025-61884High7.52025-10-12Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14…
CVE-2025-64496High7.32025-11-08Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerab…
CVE-2023-49788High7.22023-12-08Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CO…
All CVEs classified under CWE-501 — newest first (page 1 of 1)
CVESeverityScorePublishedSummary
CVE-2026-44091Critical9.12026-07-30An unauthenticated remote attacker can post a malicious ID to the MQTT Broker results in the creation of a new configuration entry in the system configuration…
CVE-2026-65902Medium6.12026-07-23DOMPurify before 3.4.7 (affected versions <= 3.4.5) passes direct references to the module-level DEFAULT_ALLOWED_TAGS and DEFAULT_ALLOWED_ATTR sets to the upon…
CVE-2026-49458Medium6.12026-07-14DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. Prior to 3.4.6, DOMPurify.sanitize(node, { IN_PLACE: true }) accepted same-or…
CVE-2026-48746Critical9.12026-06-22vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust on…
CVE-2026-33828High7.82026-06-09Trust boundary violation in Windows Attestation allows an authorized attacker to elevate privileges locally.
CVE-2026-35051Critical10.02026-04-30Traefik is an HTTP reverse proxy and load balancer. Prior to versions 2.11.43, 3.6.14, and 3.7.0-rc.2, there is an authentication bypass vulnerability in Traef…
CVE-2026-34780High8.32026-04-04Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. From versions 39.0.0-alpha.1 to before 39.8.0, 40.0.0-a…
CVE-2026-24153Medium5.22026-03-31NVIDIA Jetson Linux has a vulnerability in initrd, where the nvluks trusted application is not disabled. A successful exploit of this vulnerability might lead…
CVE-2026-27893High8.82026-03-27vLLM is an inference and serving engine for large language models (LLMs). Starting in version 0.10.1 and prior to version 0.18.0, two model implementation file…
CVE-2026-4687High8.62026-03-24Sandbox escape due to incorrect boundary conditions in the Telemetry component. This vulnerability was fixed in Firefox 149, Firefox ESR 115.34, Firefox ESR 14…
CVE-2026-25725Critical10.02026-02-06Claude Code is an agentic coding tool. Prior to version 2.1.2, Claude Code's bubblewrap sandboxing mechanism failed to properly protect the .claude/settings.js…
CVE-2025-14542High7.52025-12-13The vulnerability arises when a client fetches a tools’ JSON specification, known as a Manual, from a remote Manual Endpoint. While a provider may initially se…
CVE-2025-64496High7.32025-11-08Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely offline. Versions 0.6.224 and prior contain a code injection vulnerab…
CVE-2025-61884High7.52025-10-12Vulnerability in the Oracle Configurator product of Oracle E-Business Suite (component: Runtime UI). Supported versions that are affected are 12.2.3-12.2.14…
CVE-2025-49714High7.82025-07-08Trust boundary violation in Visual Studio Code - Python extension allows an unauthorized attacker to execute code locally.
CVE-2025-48938Critical9.82025-05-30go-gh is a collection of Go modules to make authoring GitHub CLI extensions easier. A security vulnerability has been identified in versions prior to 2.12.1 wh…
CVE-2025-1118Medium4.42025-02-19A flaw was found in grub2. Grub's dump command is not blocked when grub is in lockdown mode, which allows the user to read any memory information, and an attac…
CVE-2024-49050High8.82024-11-12Visual Studio Code Python Extension Remote Code Execution Vulnerability
CVE-2024-3661High7.62024-05-06DHCP can add routes to a client’s routing table via the classless static route option (121). VPN-based security solutions that rely on routes to redirect traff…
CVE-2024-20265Medium5.92024-03-27A vulnerability in the boot process of Cisco Access Point (AP) Software could allow an unauthenticated, physical attacker to bypass the Cisco Secure Boot funct…
CVE-2024-1725Medium6.52024-03-07A flaw was found in the kubevirt-csi component of OpenShift Virtualization's Hosted Control Plane (HCP). This issue could allow an authenticated attacker to ga…
CVE-2024-23682High8.22024-01-19Artemis Java Test Sandbox versions before 1.8.0 are vulnerable to a sandbox escape when an attacker includes class files in a package that Ares trusts. An atta…
CVE-2023-49788High7.22023-12-08Collabora Online is a collaborative online office suite based on LibreOffice technology. Unlike a standalone dedicated Collabora Online server, the Built-in CO…
CVE-2023-0627Medium6.72023-09-25Docker Desktop 4.11.x allows --no-windows-containers flag bypass via IPC response spoofing which may lead to Local Privilege Escalation (LPE).This issue affect…
CVE-2023-28597High8.32023-03-27Zoom clients prior to 5.13.5 contain an improper trust boundary implementation vulnerability. If a victim saves a local recording to an SMB location and later…
CVE-2023-0629High7.12023-03-13Docker Desktop before 4.17.0 allows an unprivileged user to bypass Enhanced Container Isolation (ECI) restrictions by setting the Docker host to docker.raw.soc…
CVE-2022-20826Medium6.42022-11-15A vulnerability in the secure boot implementation of Cisco Secure Firewalls 3100 Series that are running Cisco Adaptive Security Appliance (ASA) Software or Ci…
CVE-2022-1799Medium5.72022-07-29Incorrect signature trust exists within Google Play services SDK play-services-basement. A debug version of Google Play services is trusted by the SDK for devi…
CVE-2020-4077High7.72020-07-07In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can rea…
CVE-2020-4076High7.82020-07-07In Electron before versions 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass. Code running in the main world context in the renderer can rea…
CVE-2020-15096Medium6.82020-07-07In Electron before versions 6.1.1, 7.2.4, 8.2.4, and 9.0.0-beta21, there is a context isolation bypass, meaning that code running in the main world context in…
CVE-2019-0035Medium6.82019-04-10When "set system ports console insecure" is enabled, root login is disallowed for Junos OS as expected. However, the root password can be changed using "set sy…