Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

CVEs (1,555)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2020-25593 1Acronis 1True Image Jun 17, 2026 Jul 15, 2021 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 Acronis True Image through 2021 on macOS allows local privilege escalation from admin to root due to insecure folder permissions.
CVE-2021-0486 1Google 1Android Jun 17, 2026 Jul 14, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed...Show more In onPackageAddedInternal of PermissionManagerService.java, there is possible access to external storage due to a permissions bypass. This could lead to local escalation of privilege with User execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-10 Android-11Android ID: A-171430330Show less
CVE-2021-0441 1Google 1Android Jun 17, 2026 Jul 14, 2021 N/A· v4 7.3 HIGH· v3 4.4 MEDIUM· v2 In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is need...Show more In onCreate of PermissionActivity.java, there is a possible permission bypass due to Confusing UI. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is needed for exploitation.Product: AndroidVersions: Android-11Android ID: A-174495520Show less
CVE-2021-31217 1Solarwinds 1Dameware Mini Remote Control Jun 17, 2026 Jul 13, 2021 N/A· v4 9.1 CRITICAL· v3 9.4 HIGH· v2 In SolarWinds DameWare Mini Remote Control Server 12.0.1.200, insecure file permissions allow file deletion as SYSTEM.
CVE-2021-32725 1Nextcloud 1Nextcloud Server Jun 17, 2026 Jul 12, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, default share permissions were not being respected for federated reshares of files and folders. The iss...Show more Nextcloud Server is a Nextcloud package that handles data storage. In versions prior to 19.0.13, 20.011, and 21.0.3, default share permissions were not being respected for federated reshares of files and folders. The issue was fixed in versions 19.0.13, 20.0.11, and 21.0.3. There are no known workarounds.Show less
CVE-2021-33214 1Hms Networks 1Ecatcher Jun 17, 2026 Jul 9, 2021 N/A· v4 6.1 MEDIUM· v3 6.0 MEDIUM· v2 In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of norma...Show more In HMS Ewon eCatcher through 6.6.4, weak filesystem permissions could allow malicious users to access files that could lead to sensitive information disclosure, modification of configuration files, or disruption of normal system operation.Show less
CVE-2021-26274 1Ninjarmm 1Ninjarmm Jun 17, 2026 Jul 7, 2021 N/A· v4 7.1 HIGH· v3 3.6 LOW· v2 The Agent in NinjaRMM 5.0.909 has Insecure Permissions.
CVE-2021-22346 1Huawei 2Emui Magic Ui Jun 17, 2026 Jun 30, 2021 N/A· v4 5.3 MEDIUM· v3 5.0 MEDIUM· v2 There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may lead to the disclosure of user habits.
CVE-2021-22368 1Huawei 2Emui Magic Ui Jun 17, 2026 Jun 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is a Permission Control Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect normal use of the device.
CVE-2021-22371 1Huawei 2Emui Magic Ui Jun 17, 2026 Jun 30, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 There is an Improper Permission Management Vulnerability in Huawei Smartphone. Successful exploitation of this vulnerability may affect service confidentiality.
CVE-2021-20490 1Ibm 1Spectrum Protect Plus Jun 17, 2026 Jun 29, 2021 N/A· v4 5.5 MEDIUM· v3 2.1 LOW· v2 IBM Spectrum Protect Plus 10.1.0 through 10.1.8 could allow a local user to cause a denial of service due to insecure file permission settings. IBM X-Force ID: 197791.
CVE-2021-21737 1Zte 1Zxv10 B860h V5.0 Firmware Jun 17, 2026 Jun 24, 2021 N/A· v4 7.5 HIGH· v3 5.0 MEDIUM· v2 A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and...Show more A smart STB product of ZTE is impacted by a permission and access control vulnerability. Due to insufficient protection of system application, attackers could use this vulnerability to tamper with the system desktop and affect system customization functions. This affects: ZXV10 B860H V5.0, V83011303.0010, V83011303.0016Show less
CVE-2021-34395 1Nvidia 1Jetson Linux Jun 17, 2026 Jun 22, 2021 N/A· v4 4.2 MEDIUM· v3 4.6 MEDIUM· v2 Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure, a low...Show more Trusty TLK contains a vulnerability in its access permission settings where it does not properly restrict access to a resource from a user with local privileges, which might lead to limited information disclosure, a low risk of modifcations to data, and limited denial of service.Show less
CVE-2021-34387 1Nvidia 1Jetson Linux Jun 17, 2026 Jun 21, 2021 N/A· v4 6.7 MEDIUM· v3 7.2 HIGH· v2 The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute...Show more The ARM TrustZone Technology on which Trusty is based on contains a vulnerability in access permission settings where the portion of the DRAM reserved for TrustZone is identity-mapped by TLK with read, write, and execute permissions, which gives write access to kernel code and data that is otherwise mapped read only.Show less
CVE-2021-0143 1Intel 1Brand Verification Tool Jun 17, 2026 Jun 17, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Improper permissions in the installer for the Intel(R) Brand Verification Tool before version 11.0.0.1225 may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2021-31998 1Opensuse 1Inn Jun 17, 2026 Jun 10, 2021 N/A· v4 7.8 HIGH· v3 7.2 HIGH· v2 A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the...Show more A Incorrect Default Permissions vulnerability in the packaging of inn of SUSE Linux Enterprise Server 11-SP3; openSUSE Backports SLE-15-SP2, openSUSE Leap 15.2 allows local attackers to escalate their privileges from the news user to root. This issue affects: SUSE Linux Enterprise Server 11-SP3 inn version inn-2.4.2-170.21.3.1 and prior versions. openSUSE Backports SLE-15-SP2 inn versions prior to 2.6.2. openSUSE Leap 15.2 inn versions prior to 2.6.2.Show less
CVE-2021-21736 1Zte 1Zxhn Hs562 Firmware Jun 17, 2026 Jun 10, 2021 N/A· v4 7.2 HIGH· v3 8.0 HIGH· v2 A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can stil...Show more A smart camera product of ZTE is impacted by a permission and access control vulnerability. Due to the defect of user permission management by the cloud-end app, users whose sharing permissions have been revoked can still control the camera, such as restarting the camera, restoring factory settings, etc.. This affects ZXHN HS562 V1.0.0.0B2.0000, V1.0.0.0B3.0000EShow less
CVE-2021-0106 1Intel 1Ipmctl Jun 17, 2026 Jun 9, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privileg...Show more Incorrect default permissions in the Intel(R) Optane(TM) DC Persistent Memory for Windows software versions before 2.00.00.3842 or 1.00.00.3515 may allow an authenticated user to potentially enable escalation of privilege via local access.Show less
CVE-2021-0100 1Intel 1Ssd Data Center Tool Jun 17, 2026 Jun 9, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Incorrect default permissions in the installer for the Intel(R) SSD Data Center Tool, versions downloaded before 12/31/2020, may allow an authenticated user to potentially enable escalation of privilege via local access.
CVE-2021-0058 1Intel 2Lapbc510 Firmware Lapbc710 Firmware Jun 17, 2026 Jun 9, 2021 N/A· v4 7.8 HIGH· v3 4.6 MEDIUM· v2 Incorrect default permissions in the Intel(R) NUC M15 Laptop Kit Driver Pack software before updated version 1.1 may allow an authenticated user to potentially enable escalation of privilege via local access.

Previous 1...555657...78 Next