CWE-276
Medium likelihoodIncorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.
1,510 vulnerabilities with CWE-276
CVE-2025-4660
CRITICAL
Forescout SecureConnector Windows Agent - Named Pipe Remote Code Execution
CVSS 9.8
CVE-2025-3528
HIGH
Mirror Registry - Privilege Escalation
CVSS 8.2
CVE-2025-46587
MEDIUM
Media Library Module - Info Disclosure
CVSS 6.2
CVE-2025-46586
MEDIUM
HarmonyOS - Missing Authorization in Contacts Module
CVSS 5.1
CVE-2025-43595
HIGH
MSP360 Backup 4.3.1.115 - Privilege Escalation via Insecure File Permissions
CVSS 7.8
CVE-2025-42598
HIGH
SEIKO EPSON printer drivers for Windows OS - Unauthenticated Arbitrary Code Execution via DLL Placement
CVSS 7.8
CVE-2025-32981
HIGH
NETSCOUT nGeniusONE < 6.4.0 - Insecure Default Permissions for nGeniusCLI File
CVSS 7.1
CVE-2025-24914
HIGH
Nessus <10.8.4 - Privilege Escalation
CVSS 7.8
CVE-2025-30706
HIGH
Oracle MySQL Connectors 9.0.0-9.2.0 - Incorrect Default Permissions
CVSS 7.5
CVE-2025-30701
HIGH
Oracle RAS Security 19.3-19.26, 21.3-21.17, 23.4-23.7 - Unauthorized Data Access and Modification via Oracle Net
CVSS 7.3
CVE-2025-3617
HIGH
Rockwell Automation ThinManager 14.0.0-14.0.1 - Privilege Escalation via Temporary Folder Permission Inheritance
CVSS 7.8
CVE-2025-23386
HIGH
openSUSE Tumbleweed gerbera <2.5.0-1.1 - Privilege Escalation
CVSS 7.8
CVE-2025-29801
HIGH
Microsoft AutoUpdate < 4.78 - Privilege Escalation via Incorrect Default Permissions
CVSS 7.8
CVE-2025-29570
HIGH
LBT-T300-T400 Firmware 3.2 - Privilege Escalation via tftp_image_check Function
CVSS 7.8
CVE-2025-29504
HIGH
student-manage 1 - Privilege Escalation via Unsafe Permission Verification
CVSS 7.8
CVE-2025-0014
HIGH
AMD Ryzen AI - Privilege Escalation
CVSS 7.3
CVE-2025-30465
CRITICAL
macOS Ventura <13.7.5 - Info Disclosure
CVSS 9.8
CVE-2025-24277
HIGH
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation via Directory Path Parsing
CVSS 7.8
CVE-2025-24267
HIGH
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation via Incorrect Default Permissions
CVSS 7.8
CVE-2025-24238
CRITICAL
iPadOS < 18.4 - Incorrect Default Permissions
CVSS 9.8
CVE-2025-24234
HIGH
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation to Root
CVSS 7.8
CVE-2025-24207
CRITICAL
macOS < 13.7.5, < 14.7.5, < 15.4 - Unauthorized iCloud Storage Enablement via Permissions Issue
CVSS 9.8
CVE-2025-24195
CRITICAL
macOS < 13.7.5, < 14.7.5, < 15.4 - Privilege Escalation via Integer Overflow
CVSS 9.8
CVE-2025-24172
CRITICAL
macOS < 13.7.5, < 14.7.5, < 15.4 - Unprotected User Data Exposure via Mail Preview Permissions
CVSS 9.8
CVE-2025-24170
HIGH
macOS < 13.7.5 and < 14.7.5 - Privilege Escalation via Improper File Handling
CVSS 7.8
Details
Vulnerabilities
1,510
Exploit Likelihood
Medium