CWE-276
Medium likelihoodIncorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
1,512 vulnerabilities with CWE-276
CVE-2022-42718
HIGH
NI LabVIEW Command Line Interface < 22.3.1 - Authenticated Privilege Escalation via Installation Folder Permissions
CVSS 7.8
CVE-2022-4020
HIGH
Acer Notebook - Privilege Escalation
CVSS 8.1
CVE-2022-41943
CRITICAL
sourcegraph < 4.1.0 - Authenticated Remote Code Execution via Experimental customGitFetch Feature
CVSS 9.0
CVE-2022-42130
MEDIUM
Liferay DXP 7.1.0-7.4.3.4 - Authenticated Incorrect Default Permissions in Dynamic Data Mapping
CVSS 4.3
CVE-2022-42128
MEDIUM
Liferay Portal 7.4.1-7.4.3.4 and Liferay DXP 7.4 GA - Incorrect Default Permissions in Hypermedia REST APIs
CVSS 5.3
CVE-2022-42127
MEDIUM
Liferay Portal 7.4.3.5-7.4.3.36 and DXP 7.4 update 1-36 - Unauthenticated Information Disclosure via Friendly URL Module
CVSS 5.3
CVE-2022-36377
MEDIUM
Intel(R) Wireless Adapter Driver <22.190.0.3 - Privilege Escalation
CVSS 6.7
CVE-2022-36367
MEDIUM
Intel(R) Support <v22.02.28 - Info Disclosure
CVSS 4.4
CVE-2022-44561
HIGH
Huawei EMUI and HarmonyOS - Unauthorized Widget and Shortcut Addition via Preset Launcher Module
CVSS 7.5
CVE-2022-44557
HIGH
HarmonyOS - Incorrect Default Permissions in SmartTrimProcessEvent
CVSS 7.5
CVE-2022-44554
HIGH
HarmonyOS - Incorrect Default Permissions in Power Module
CVSS 7.5
CVE-2022-44548
MEDIUM
HarmonyOS and EMUI - Incorrect Default Permissions in Bluetooth Pairing Process
CVSS 4.3
CVE-2022-34824
CRITICAL
EXPRESSCLUSTER X < 5.0 - Unauthenticated Arbitrary File Write via Weak File Permissions
CVSS 9.8
CVE-2022-20465
MEDIUM
Android - Lockscreen Bypass via KeyguardHostViewController Logic Error
CVSS 4.6
CVE-2022-20452
HIGH
Android <13 - Local Privilege Escalation
CVSS 7.8
CVE-2022-20448
MEDIUM
Android - Local Privilege Escalation via NotificationManagerService Permissions Bypass
CVSS 5.5
CVE-2022-20441
HIGH
Android - Local Privilege Escalation via Unexported Intent Handler Launch
CVSS 7.8
CVE-2022-43574
HIGH
IBM Robotic Process Automation <21.0.6 - Privilege Escalation
CVSS 7.5
CVE-2022-33182
HIGH
Brocade Fabric OS <9.1.0 - Privilege Escalation
CVSS 7.8
CVE-2022-36439
MEDIUM
ASUS System Control Interface <3.1.5.0 - Local Privilege Escalation
CVSS 6.0
CVE-2022-36438
HIGH
AsusSwitch.exe <1.0.10.0 - Privilege Escalation
CVSS 7.8
CVE-2022-3368
HIGH
Avira Security <1.1.72.30556 - Privilege Escalation
CVSS 7.3
CVE-2022-42464
MEDIUM
OpenHarmony < 3.0.6 - Kernel Memory Pool Override via /dev/mmz_userdev Driver
CVSS 6.7
CVE-2022-36803
HIGH
Atlassian Jira Align < 10.109.2 - Authenticated Privilege Escalation via MasterUserEdit API
CVSS 8.8
CVE-2022-40187
HIGH
Foresight GC3 Launch Monitor < 1.5.0.2 - Unauthenticated Remote Code Execution via TCF Service
CVSS 8.0
Details
Vulnerabilities
1,512
Exploit Likelihood
Medium