CWE-732
High likelihoodIncorrect Permission Assignment for Critical Resource
Parent: CWE-285 - Improper Authorization
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1,664 vulnerabilities with CWE-732
CVE-2021-39621
HIGH
Android - Local Privilege Escalation via Unsafe PendingIntent in LegacyModeSmsHandler
CVSS 7.8
CVE-2021-44466
HIGH
Bitmask Riseup VPN 0.21.6 - Local Privilege Escalation via Improper ACLs
CVSS 7.3
CVE-2021-20172
HIGH
Netgear Genie Installer - Local Privilege Escalation via Insecure File Handling
CVSS 7.8
CVE-2021-20874
HIGH
GroupSession Free/Z/ByCloud <5.1.1 - Info Disclosure
CVSS 7.5
CVE-2021-27445
HIGH
Mesa Labs AmegaView <3.0 - Privilege Escalation
CVSS 7.8
CVE-2021-35248
MEDIUM
SolarWinds Orion Platform < 2020.2.6 - Unauthenticated User Enumeration via Orion.UserSettings Entity
CVSS 6.8
CVE-2021-0904
MEDIUM
Android - Permission Bypass via Insecure SRAMROM Permission Setting
CVSS 6.7
CVE-2021-42309
HIGH
Microsoft SharePoint Server - Remote Code Execution
CVSS 8.8
CVE-2021-43065
HIGH
Fortinet FortiNAC <9.2.0 - Privilege Escalation
CVSS 7.8
CVE-2021-36133
HIGH
OPTEE-OS CSU - Privilege Escalation
CVSS 7.1
CVE-2021-44512
HIGH
tmate-ssh-server < 2.3.0 - Incorrect Permission Assignment for Critical Resource
CVSS 7.0
CVE-2021-43034
HIGH
Kaseya Unitrends Backup <10.5.5 - Privilege Escalation
CVSS 7.8
CVE-2021-43359
HIGH
Sunnet eHRD - Authenticated Privilege Escalation via Account Management Page
CVSS 8.8
CVE-2021-40101
HIGH
Concrete CMS < 8.5.7 - Unauthenticated Password Change via Dashboard
CVSS 7.2
CVE-2021-44230
MEDIUM
Burp Suite Enterprise Edition < 2021.11 - Privilege Escalation via Weak H2 Database File Permissions
CVSS 6.5
CVE-2021-43998
MEDIUM
HashiCorp Vault <1.7.5-1.8.4 - Info Disclosure
CVSS 6.5
CVE-2021-42115
HIGH
TopEase <= 7.1.27 - Unauthenticated Privilege Escalation via Missing HTTPOnly Flag
CVSS 8.1
CVE-2021-24703
MEDIUM
WordPress Download Plugin <1.6.1 - CSRF
CVSS 5.7
CVE-2021-43019
HIGH
Adobe Creative Cloud <5.5 - Privilege Escalation
CVSS 7.8
CVE-2021-39235
MEDIUM
Apache Ozone < 1.2.0 - Authenticated Incorrect Permission Assignment for Critical Resource
CVSS 6.5
CVE-2021-0064
HIGH
Intel WiFi Firmware < 22.40 - Authenticated Privilege Escalation via Insecure Inherited Permissions
CVSS 7.8
CVE-2021-33094
HIGH
Intel Nuc M15 Laptop Kit Keyboard Led Service Driver Pack < 1.0.0.4 - Incorrect Permission Assignment
CVSS 7.8
CVE-2021-33093
HIGH
Intel Nuc M15 Laptop Kit Serial IO Driver Pack < 30.100.2104.1 - Incorrect Permission Assignment
CVSS 7.8
CVE-2021-33091
HIGH
Intel(R) NUC M15 Laptop Kit audio driver <1.3 - Privilege Escalation
CVSS 7.8
CVE-2021-42955
HIGH
Zoho Remote Access Plus Server <10.1.2132 - Privilege Escalation
CVSS 7.3
Details
Vulnerabilities
1,664
Exploit Likelihood
High