CWE-277
72 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 72Published CVEs72 of them scored
- 10Last 12 monthspublished in the last year
- 3Critical20 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-26052
Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege.…
Intel(R) Graphics Driver software installers
Medium5.4 - CVE-2026-111573
Privilege escalation via unprotected Windows agent data folder
Checkmk GmbH · Checkmk
Medium6.3 - CVE-2025-11395
Podman: arbitrary file write when importing oci archive
Red Hat · Red Hat Enterprise Linux 10
Medium5.5 - CVE-2026-9046
A potential insecure permissions vulnerability was reported in Legion Zone and the Lenovo App Store Windows applications, distributed exclusively in the…
Lenovo · Legion Zone
High7.3 - CVE-2026-30266
Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafted file
Product not named
High7.8 - CVE-2026-20630
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.7.4, macOS Sonoma 14.8.4, macOS Tahoe 26.3. An app may…
Apple · macOS
Medium5.5 - CVE-2025-32092
Insecure inherited permissions for some Intel(R) Graphics Software before version 25.30.1702.0 within Ring 3: User Applications may allow an escalation of…
Intel(R) Graphics Software
Medium5.4 - CVE-2025-37174
Authenticated Arbitrary File Write Vulnerability in AOS 10 and AOS-8 Web-Based Management Interface
Hewlett Packard Enterprise (HPE) · ArubaOS (AOS)
High7.2 - CVE-2025-65111
SpiceDB's LookupResources with Multiple Entrypoints across Different Definitions Can Return Incomplete Results
authzed · spicedb
Low2.9 - CVE-2025-64185
Open OnDemand RPM packages create world writable locations
OSC · ondemand
Medium6.9