CWE-283
36 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 36Published CVEs36 of them scored
- 22Last 12 monthspublished in the last year
- 2Critical10 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-118029
Unverified ownership of the default Athena query result location in AWS SDK for pandas
aws · aws-sdk-pandas
Medium5.9 - CVE-2026-112911
filelock: StrictSoftFileLock and SoftReadWriteLock adopt a protocol directory another user created first, losing mutual exclusion
tox-dev · filelock
Medium6.3 - CVE-2026-83791
Windows Virtual Input Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1809
High7.8 - CVE-2026-110237
Vifm 0.8.1-beta through 0.14.4 Unverified IPC FIFO Ownership Allows Cross-User Command Execution
vifm · vifm
High7.0 - CVE-2026-93853
Barman snapshot backup deletion trusts unverified backup catalog metadata
EnterpriseDB · Barman
High7.2 - CVE-2025-24890
gix-sec safe.directory protections absent for elevated administrators
GitoxideLabs · gitoxide
Medium6.8 - CVE-2026-87913
Missing S3 bucket ownership verification in the AWS Security Agent MCP server
AWS · AWS Security Agent MCP server
Medium5.1 - CVE-2026-87912
Missing S3 bucket ownership verification in the AWS Security Agent plugin for aws-agents-for-devsecops
AWS · AWS Security Agent plugin
Medium5.1 - CVE-2026-84386
A unverified ownership vulnerability in Fortinet FortiClientWindows 7.4.0 through 7.4.7, FortiClientWindows 7.2 all versions may allow attacker to improper…
Fortinet · FortiClientWindows
Medium4.7 - CVE-2026-85781
Unverified access point ownership in Amazon EFS CSI Driver
aws · aws-efs-csi-driver
Medium5.1