CWE-693

975 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 14 of them as exploited in the wild.

Critical 149High 358Medium 413Low 53Not scored 2

CVEs per yearBy the year they were published

CVE-2026-58704
In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of…
Google · Android
ExploitedHigh8.8
CVE-2026-32202
Windows Shell Spoofing Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedMedium4.3
CVE-2025-40536
SolarWinds Web Help Desk Security Control Bypass Vulnerability
SolarWinds · Web Help Desk
ExploitedHigh8.1
CVE-2026-21510
Windows Shell Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh8.8
CVE-2026-21513
MSHTML Framework Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh8.8
CVE-2025-0411
7-Zip Mark-of-the-Web Bypass Vulnerability
7-Zip · 7-Zip
ExploitedHigh7.0
CVE-2024-38226
Microsoft Publisher Security Feature Bypass Vulnerability
Microsoft · Microsoft Office 2019
ExploitedHigh7.3
CVE-2024-38217
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1507
ExploitedMedium5.4
CVE-2024-38213
Windows Mark of the Web Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedMedium6.5
CVE-2024-29988
SmartScreen Prompt Security Feature Bypass Vulnerability
Microsoft · Windows 10 Version 1809
ExploitedHigh8.8

CVE-2026-18668
Protection Mechanism Failure vulnerability affects IBM Sterling File Gateway
IBM · Sterling File Gateway
Medium6.5
CVE-2026-102618
IBM i is Affected by a Protection Mechanism Failure
IBM · i
Low3.6
CVE-2026-123556
Zebra 4.5.0 before 7.0.0 Honest Peer Ban via Mempool Lock-Time Scoring
ZcashFoundation · zebra
Medium6.9
CVE-2025-55002
JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses
jupyterlab · jupyterlab-desktop
Medium5.5
CVE-2025-54991
JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)
jupyterlab · jupyterlab-desktop
Medium5.5
CVE-2026-119170
Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
Python Software Foundation · CPython
High8.2
CVE-2026-83494
Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)
Red Hat · Red Hat OpenShift AI (RHOAI)
Not scored
CVE-2026-103863
Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths
Apache Software Foundation · Apache Sling Engine
Not scored
CVE-2026-105991
Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM · Db2 Genius Hub
Low3.5
CVE-2026-108588
Multiple vulnerabilities that affects IBM Db2 Genius Hub
IBM · Db2 Genius Hub
Medium5.4