Skip to content
CVE Ledger
  • Newest CVEsPage
  • Recently added to KEVPage
  • Rising exploitation (EPSS)Page
  • Weekly digestPage
  • StatisticsPage
  • WatchlistPage
  • API documentationPage
  • MCP serverPage
  • Data sourcesPage
  • ChangelogPage
  • AboutPage
  • How it's builtPage

CWE-264: Permissions, privileges and access controls

5,511 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 3 of them as exploited in the wild.

All 5,511 in the listAtom feed of new CVEsWhat CWE-264 is, at MITRE (opens in a new tab)
Published CVEs
5,511
Last 12 months
47
Critical
139
Known exploited
3

Critical 139High 2,219Medium 2,681Low 472Not scored 0

CVEs per yearBy the year they were published

  1. 2015535
  2. 2016619
  3. 2017316
  4. 2018127
  5. 201985
  6. 202042
  7. 202113
  8. 202246
  9. 202314
  10. 202420
  11. 202529
  12. 202639

Known exploitedNewest addition to KEV first

  • CVE-2015-3246

    libuser before 0.56.13-8 and 0.60 before 0.60-7, as used in the userhelper program in the usermode package, directly modifies /etc/passwd, which allows local…

    Product not named

    ExploitedHigh7.4
  • CVE-2015-1769

    Mount Manager in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2,…

    Product not named

    ExploitedMedium6.6
  • CVE-2016-3643

    SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat…

    Product not named

    ExploitedHigh7.8

Newest CVEs

  • CVE-2026-101184

    Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

    Huawei · HarmonyOS

    Medium5.5
  • CVE-2026-101177

    Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

    Huawei · HarmonyOS

    Low3.7
  • CVE-2026-101176

    Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service…

    Huawei · HarmonyOS

    High7.1
  • CVE-2026-101171

    Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

    Huawei · HarmonyOS

    Low3.6
  • CVE-2026-101172

    Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.

    Huawei · HarmonyOS

    Medium6.2
  • CVE-2026-116367

    DeepSeek Harness sandbox.ts createContext

    DeepSeek · Harness

    Medium5.3
  • CVE-2026-96012

    IBM Db2 Mirror for i Privilege Escalation

    IBM · Db2 Mirror for i

    Critical9.9
  • CVE-2026-108788

    deepseek-ai deepseek-harness Sandbox spawn sandbox

    deepseek-ai · deepseek-harness

    Medium4.8
  • CVE-2026-76488

    Cisco Application Policy Infrastructure Controller Authenticated Information Disclosure Vulnerability

    Cisco · Cisco Application Policy Infrastructure Controller (APIC)

    Medium6.5
  • CVE-2026-101102

    deepseek-ai deepseek-harness Code Mode Sandbox run_code sandbox

    deepseek-ai · deepseek-harness

    Medium5.3

Vendors it comes up for most

  1. Google Inc.106
  2. Cisco70
  3. Huawei69
  4. Qualcomm, Inc.21
  5. Intel12
  6. ABB9
  7. IBM Corporation9
  8. Red Hat7
  9. IBM6
  10. Apache Software Foundation5