CWE-275

118 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 7High 38Medium 62Low 11Not scored 0

CVEs per yearBy the year they were published

CVE-2026-123989
ESEngine DeepSeek-Reasonix Build Script Execution build.rs loadGitStatus permission
ESEngine · DeepSeek-Reasonix
Medium5.3
CVE-2026-123665
kubescape Output printresults.go GetWriter permission
kubescape
Low2.4
CVE-2026-105165
devopspolis secrets-replicator AssumeRole handler.py process_single_secret permission assignment
devopspolis · secrets-replicator
Medium5.3
CVE-2026-49311
Permission control vulnerability in the event notification module.Impact: Successful exploitation of this vulnerability may affect availability.
Huawei · HarmonyOS
Medium6.2
CVE-2026-75978
xianrendzw EasyReport QueryerFactory DataSourceController.java DataSourceController.add permission
xianrendzw · EasyReport
Medium5.3
CVE-2026-19376
Uasoft Badaso File API api.php class permission
Uasoft · Badaso
Medium6.9
CVE-2026-19191
StableBit DrivePool DrivePoolService DrivePool.Service.exe permission
StableBit · DrivePool
High8.5
CVE-2026-19190
StableBit Scanner ScannerService Scanner.Service.exe permission
StableBit · Scanner
High8.5
CVE-2026-12201
IObit Malware Fighter DLL permission
IObit · Malware Fighter
Medium4.8
CVE-2026-41976
Permission control vulnerability in the audio framework. Impact: Successful exploitation of this vulnerability may affect service confidentiality.
Huawei · HarmonyOS
Medium6.6