CWE-732
1,851 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 4 of them as exploited in the wild.
- Published CVEs
- 1,851
- Last 12 months
- 339
- Critical
- 153
- Known exploited
- 4
Critical 153High 912Medium 677Low 109Not scored 0
CVEs per yearBy the year they were published
- 20111
- 20132
- 201789
- 2018226
- 2019219
- 2020178
- 2021162
- 2022135
- 2023166
- 2024149
- 2025194
- 2026308
Known exploitedNewest addition to KEV first
- CVE-2018-13374
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server…
Fortinet · Fortinet FortiOS, fortiADC
ExploitedMedium4.3 - CVE-2022-22960
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support…
VMware Workspace ONE Access, Identity Manager and vRealize Automation
ExploitedHigh7.8 - CVE-2021-23874
McAfee Total Protection (MTP) privilege escalation vulnerability
McAfee,LLC · McAfee Total Protection (MTP)
ExploitedHigh8.2 - CVE-2019-15752
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in…
Product not named
ExploitedHigh7.8
Newest CVEs
- CVE-2026-124039
Gitleaks through 8.30.1 World-Readable Report Files via --report-path
gitleaks · gitleaks
Medium4.8 - CVE-2026-112908
filelock: StrictSoftFileLock creates its claim directories without the lock mode, so another local user with a write bit on them can end a live hold
tox-dev · filelock
Medium5.3 - CVE-2026-112910
filelock: WindowsFileLock ignores mode: a 0o600 lock file and the ReadWriteLock database inherit the directory ACL
tox-dev · filelock
Medium5.3 - CVE-2026-54146
OpenHuman: Bearer token leak via process environment variable on macOS (same-UID local RCE primitive)
tinyhumansai · openhuman
High8.8 - CVE-2026-54381
VitaFit Cloud API Storage Bucket Unauthenticated Access Information Disclosure
Shenzhen Shine Industrial Co., Ltd. · VitaFit
High8.7 - CVE-2026-92200
Quest Foglight for Databases Incorrect Permission Assignment Local Privilege Escalation Vulnerability
Quest · Foglight for Databases
High7.8 - CVE-2026-16305
CVE-2026-16305
INFINITT Healthcare · System Manager
High7.8 - CVE-2026-120066
psqlODBC log files are created with default permissions at a predictable path and follow symbolic links
PostgreSQL · psqlODBC
Medium5.3 - CVE-2026-91904
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…
Dell · OpenManage Enterprise
Medium5.5 - CVE-2026-91906
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…
Dell · OpenManage Enterprise
Medium5.5