CWE-708
22 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 22Published CVEs22 of them scored
- 6Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root…
NixOS · Nix
Medium4.0 - CVE-2026-6469
PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
PostgreSQL
Low3.8 - CVE-2026-40196
HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation
sysadminsmedia · homebox
High8.1 - CVE-2026-32691
Timing ownership claim attack on new external back-end secrets
Canonical · Juju
Medium5.3 - CVE-2025-5467
Ubuntu Apport Insecure File Permissions Vulnerability
Canonical · apport
Low1.9 - CVE-2025-14262
Jobs can be saved as workflows with wrong permissions on KNIME Business Hub
KNIME · KNIME Business Hub
Medium5.3 - CVE-2025-5069
Incorrect Ownership Assignment in GitLab
GitLab · GitLab
Low3.5 - CVE-2024-52561
A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a…
Parallels · Parallels Desktop for Mac
High7.8 - CVE-2024-45417
Zoom Apps for macOS - Uncontrolled Resource Consumption
Zoom Communications, Inc · Zoom Apps for macOS
Medium6.0 - CVE-2024-45426
Zoom Workplace Apps - Incorrect Ownership Assignment
Zoom Communications, Inc · Zoom Workplace Apps
Medium4.9