CWE-732
High likelihoodIncorrect Permission Assignment for Critical Resource
Parent: CWE-285 - Improper Authorization
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1,661 vulnerabilities with CWE-732
CVE-2025-34212
CRITICAL
Vasion Print Virtual Appliance Host <22.0.843 & Application <20.0.1923 Supply Chain Attack
CVSS 9.8
CVE-2025-10541
HIGH
iMonitor EAM 9.6394 - Privilege Escalation
CVSS 7.8
CVE-2025-43808
MEDIUM
Liferay DXP 2023.Q3.1-2023.Q3.10 - Unauthenticated Virtual Product Access via Documents and Media
CVSS 5.3
CVE-2025-34206
CRITICAL
Vasion Print Virtual Appliance Host and Application - Cleartext Storage of Sensitive Information in /var/www/efs_storage
CVSS 9.8
CVE-2025-34189
HIGH
Vasion Print <1.0.735-20.0.1330 - Code Injection
CVSS 7.8
CVE-2025-54497
HIGH
Cognex In-Sight Explorer and In-Sight Camera Firmware - Privilege E...
CVSS 8.1
CVE-2025-52873
HIGH
Cognex In-Sight Explorer & Camera Firmware - Privilege Escalation
CVSS 8.1
CVE-2025-10643
CRITICAL
Wondershare Repairit - Unauthenticated Authentication Bypass via Storage Account Token
CVSS 9.1
CVE-2025-59349
LOW
Dragonfly < 2.1.0 - Incorrect Permission Assignment for Critical Resource via Directory Creation
CVSS 3.3
CVE-2025-0164
LOW
IBM QRadar SIEM <7.5.13 - Privilege Escalation
CVSS 2.3
CVE-2025-57392
HIGH
BenimPOS Masaustu 3.0.x - Insecure File Permissions
CVSS 7.8
CVE-2025-40804
CRITICAL
SIMATIC Virtualization as a Service - Info Disclosure
CVSS 9.1
CVE-2025-41664
HIGH
Service Runtime - Privilege Escalation
CVSS 7.5
CVE-2025-58372
HIGH
Roo Code <3.25.23 - Command Injection
CVSS 8.1
CVE-2025-10059
MEDIUM
MongoDB 6.0.0-6.0.23 - Denial of Service via Improper lsid Field Handling
CVSS 6.5
CVE-2025-23258
HIGH
NVIDIA DOCA collectx-dpeserver 2.5-2.5.3 2.9-2.9.2 2.10 - Privilege Escalation
CVSS 7.3
CVE-2025-23257
HIGH
NVIDIA DOCA collectx-clxapidev < 2.9.3 and 2.10 - Privilege Escalation via Incorrect Permission Assignment
CVSS 7.3
CVE-2025-36193
HIGH
IBM Transformation Advisor 2.0.1-4.3.1 - Privilege Escalation via Incorrect File Permissions
CVSS 8.4
CVE-2025-43268
HIGH
macOS Sequoia <15.6 - Privilege Escalation
CVSS 7.8
CVE-2025-9578
HIGH
Acronis Cyber Protect Cloud Agent <40734 - Privilege Escalation
CVSS 7.8
CVE-2025-53396
HIGH
SS1 <16.0.0.10 - Privilege Escalation
CVSS 7.0
CVE-2025-43729
HIGH
Dell ThinOS < 2508 - Incorrect Permission Assignment for Critical Resource
CVSS 7.8
CVE-2025-30063
CRITICAL
CGM CLININET < 2024.MS4 - Unprotected Credential Exposure via Configuration File
CVE-2025-0093
HIGH
Android - Unapproved Data Access via Missing Permission Check in AdapterService
CVSS 7.5
CVE-2025-4609
CRITICAL
Google Chrome <136.0.7103.113 - Sandbox Escape
CVSS 9.6
Details
Vulnerabilities
1,661
Exploit Likelihood
High