CWE-274
42 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 42Published CVEs42 of them scored
- 3Last 12 monthspublished in the last year
- 2Critical23 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-62764
Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissions
Apache Software Foundation · Apache Accumulo
Medium5.7 - CVE-2025-54511
Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without…
AMD · MI-25
Medium5.3 - CVE-2026-33005
Apache OpenMeetings: Insufficient checks in FileWebService
Apache Software Foundation · Apache OpenMeetings
Medium4.3 - CVE-2025-62175
Mastodon streaming API fails to disconnect disabled and suspended users
mastodon · mastodon
Medium4.3 - CVE-2023-20516
Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in…
AMD · AMD Instinct™ MI250
Low3.3 - CVE-2025-29365
spimsimulator spim v9.1.24 and before is vulnerable to Buffer Overflow in READ_STRING_SYSCALL.
Product not named
Critical9.8 - CVE-2025-31275
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any…
Apple · macOS
Medium6.2 - CVE-2025-20177
Cisco IOS XR Software Image Verification Bypass Vulnerability
Cisco · Cisco IOS XR Software
Medium6.7 - CVE-2024-46974
GPU DDK - Arbitrary write of read-only dmabuf
Imagination Technologies · Graphics DDK
High7.8 - CVE-2025-20156
Cisco Meeting Management Client-Server Privilege Escalation Vulnerability
Cisco · Cisco Meeting Management
Critical9.9