CWE-276
Medium likelihoodIncorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
1,533 vulnerabilities with CWE-276
CVE-2025-43595
HIGH
MSP360 Backup 4.3.1.115 - Privilege Escalation via Insecure File Permissions
CVSS 7.8
CVE-2025-42598
HIGH
SEIKO EPSON printer drivers for Windows OS - Unauthenticated Arbitrary Code Execution via DLL Placement
CVSS 7.8
CVE-2025-32981
HIGH
NETSCOUT nGeniusONE < 6.4.0 - Insecure Default Permissions for nGeniusCLI File
CVSS 7.1
CVE-2025-24914
HIGH
Nessus <10.8.4 - Privilege Escalation
CVSS 7.8
CVE-2025-30706
HIGH
Oracle MySQL Connectors 9.0.0-9.2.0 - Incorrect Default Permissions
CVSS 7.5
CVE-2025-30701
HIGH
Oracle RAS Security 19.3-19.26, 21.3-21.17, 23.4-23.7 - Unauthorized Data Access and Modification via Oracle Net
CVSS 7.3
CVE-2025-3617
HIGH
Rockwell Automation ThinManager 14.0.0-14.0.1 - Privilege Escalation via Temporary Folder Permission Inheritance
CVSS 7.8
CVE-2025-23386
HIGH
openSUSE Tumbleweed gerbera <2.5.0-1.1 - Privilege Escalation
CVSS 7.8
CVE-2025-29801
HIGH
Microsoft AutoUpdate < 4.78 - Privilege Escalation via Incorrect Default Permissions
CVSS 7.8
CVE-2025-29570
HIGH
LBT-T300-T400 Firmware 3.2 - Privilege Escalation via tftp_image_check Function
CVSS 7.8
CVE-2025-29504
HIGH
student-manage 1 - Privilege Escalation via Unsafe Permission Verification
CVSS 7.8
CVE-2025-0014
HIGH
AMD Ryzen AI - Privilege Escalation
CVSS 7.3
CVE-2025-30465
CRITICAL
macOS Ventura <13.7.5 - Info Disclosure
CVSS 9.8
CVE-2025-24277
HIGH
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation via Directory Path Parsing
CVSS 7.8
CVE-2025-24267
HIGH
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation via Incorrect Default Permissions
CVSS 7.8
CVE-2025-24238
CRITICAL
iPadOS < 18.4 - Incorrect Default Permissions
CVSS 9.8
CVE-2025-24234
HIGH
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation to Root
CVSS 7.8
CVE-2025-24207
CRITICAL
macOS < 13.7.5, < 14.7.5, < 15.4 - Unauthorized iCloud Storage Enablement via Permissions Issue
CVSS 9.8
CVE-2025-24195
CRITICAL
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation via Integer Overflow
CVSS 9.8
CVE-2025-24172
CRITICAL
macOS < 13.7.5, < 14.7.5, < 15.4 - Unprotected User Data Exposure via Mail Preview Permissions
CVSS 9.8
CVE-2025-24170
HIGH
macOS < 13.7.5 and < 14.7.5 - Privilege Escalation via Improper File Handling
CVSS 7.8
CVE-2025-2782
MEDIUM
WatchGuard Terminal Services Agent <12.11 - Privilege Escalation
CVE-2025-2781
MEDIUM
WatchGuard Mobile VPN with SSL Client <12.11 - Privilege Escalation
CVE-2025-25535
CRITICAL
SCRIPT CASE v.1.0.002 Build7 - Privilege Escalation
CVSS 9.8
CVE-2025-27612
MEDIUM
libcontainer < 0.5.3 - Incorrect Default Permissions via Tenant Builder Capability Inheritance
CVSS 5.9
Details
Vulnerabilities
1,533
Exploit Likelihood
Medium