CWE-276

Medium likelihood

Incorrect Default Permissions

Parent: CWE-732 - Incorrect Permission Assignment for Critical Resource

During installation, installed file permissions are set to allow anyone to modify those files.

1,487 vulnerabilities with CWE-276
CVE-2025-43596 HIGH
Msp360 Backup < 8.1.1.19 - Incorrect Default Permissions
CVSS 7.8
CVE-2025-4280 MEDIUM
Poedit - Code Injection
CVE-2025-48070 LOW
Plane < 0.23.0 - Incorrect Default Permissions
CVSS 3.5
CVE-2025-20095 MEDIUM
Intel RealSense SDK <2.56.2 - Privilege Escalation
CVSS 6.7
CVE-2025-4660 CRITICAL
SecureConnector - RCE
CVSS 9.8
CVE-2025-3528 HIGH
Mirror Registry - Privilege Escalation
CVSS 8.2
CVE-2025-46587 MEDIUM
Media Library Module - Info Disclosure
CVSS 6.2
CVE-2025-46586 MEDIUM
Contacts Module - DoS
CVSS 5.1
CVE-2025-43595 HIGH
Msp360 Backup - Incorrect Default Permissions
CVSS 7.8
CVE-2025-42598 HIGH
SEIKO EPSON Printer Driver - RCE
CVSS 7.8
CVE-2025-32981 HIGH
Netscout Ngeniusone < 6.4.0 - Incorrect Default Permissions
CVSS 7.1
CVE-2025-24914 HIGH
Nessus <10.8.4 - Privilege Escalation
CVSS 7.8
CVE-2025-30706 HIGH
Oracle Mysql Connectors < 9.2.0 - Incorrect Default Permissions
CVSS 7.5
CVE-2025-30701 HIGH
Oracle Ras Security < 19.26 - Incorrect Default Permissions
CVSS 7.3
CVE-2025-3617 HIGH
Rockwellautomation Thinmanager - Incorrect Default Permissions
CVSS 7.8
CVE-2025-23386 HIGH
openSUSE Tumbleweed gerbera <2.5.0-1.1 - Privilege Escalation
CVSS 7.8
CVE-2025-29801 HIGH
Microsoft Autoupdate < 4.78 - Incorrect Default Permissions
CVSS 7.8
CVE-2025-29570 HIGH
Szlbt Lbt-t300-t400 Firmware - Incorrect Default Permissions
CVSS 7.8
CVE-2025-29504 HIGH
Huang-yk Student-manage - Incorrect Default Permissions
CVSS 7.8
CVE-2025-0014 HIGH
AMD Ryzen AI - Privilege Escalation
CVSS 7.3
CVE-2025-30465 CRITICAL
macOS Ventura <13.7.5 - Info Disclosure
CVSS 9.8
CVE-2025-24277 HIGH
Apple Macos < 13.7.5 - Incorrect Default Permissions
CVSS 7.8
CVE-2025-24267 HIGH
Apple Macos < 13.7.5 - Incorrect Default Permissions
CVSS 7.8
CVE-2025-24238 CRITICAL
Apple Ipados < 18.4 - Incorrect Default Permissions
CVSS 9.8
CVE-2025-24234 HIGH
Apple Macos < 13.7.5 - Incorrect Default Permissions
CVSS 7.8
Details
Vulnerabilities 1,487
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits