CWE-657
19 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 19Published CVEs19 of them scored
- 2Last 12 monthspublished in the last year
- 1Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-48399
Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)
Adobe · Adobe Campaign Classic
High7.5 - CVE-2026-39888
PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)
MervinPraison · praisonaiagents
Critical10.0 - CVE-2025-54255
Acrobat Reader | Violation of Secure Design Principles (CWE-657)
Adobe · Acrobat Reader
Medium4.0 - CVE-2025-24887
OpenCTI bypass of protected attribute update
OpenCTI-Platform · opencti
Medium6.3 - CVE-2024-57957
Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service…
Huawei · HarmonyOS
Medium6.6 - CVE-2024-33849
ci solution CI-Out-of-Office Manager through 6.0.0.77 uses a Hard-coded Cryptographic Key.
Product not named
Medium6.5 - CVE-2024-26139
OpenCTI Authenticated Privilege Escalation
OpenCTI-Platform · opencti
High8.3 - CVE-2023-52714
Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service…
Huawei · HarmonyOS
High7.5 - CVE-2023-29320
ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flaw
Adobe · Acrobat Reader
High7.8 - CVE-2022-30683
AEM Violation of Secure Design Principles Security feature bypass
Adobe · Experience Manager
Medium5.3