Incorrect Default Permissions

During installation, installed file permissions are set to allow anyone to modify those files.

CVEs (1,579)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2025-29801 1Microsoft 1Autoupdate Jun 17, 2026 Apr 8, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Incorrect default permissions in Microsoft AutoUpdate (MAU) allows an authorized attacker to elevate privileges locally.
CVE-2025-29570 1Szlbt 1Lbt T300 T400 Firmware Jun 17, 2026 Apr 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 An issue in Shenzhen Libituo Technology Co., Ltd LBT-T300-T400 v3.2 allows a local attacker to escalate privileges via the function tftp_image_check of a binary named rc.
CVE-2025-29504 1Huang Yk 1Student Manage Jun 17, 2026 Apr 3, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 Insecure Permission vulnerability in student-manage 1 allows a local attacker to escalate privileges via the Unsafe permission verification.
CVE-2025-0014 - - Jun 17, 2026 Apr 2, 2025 N/A· v4 7.3 HIGH· v3 N/A· v2 Incorrect default permissions on the AMD Ryzen(TM) AI installation folder could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
CVE-2025-30465 1Apple 2Ipados Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5...Show more A permissions issue was addressed with improved validation. This issue is fixed in iPadOS 17.7.6, macOS Sequoia 15.4, macOS Sequoia 15.7.2, macOS Sonoma 14.7.5, macOS Sonoma 14.8.2, macOS Tahoe 26.1, macOS Ventura 13.7.5. A shortcut may be able to access files that are normally inaccessible to the Shortcuts app.Show less
CVE-2025-24277 1Apple 1Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privil...Show more A parsing issue in the handling of directory paths was addressed with improved path validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.Show less
CVE-2025-24267 1Apple 1Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.
CVE-2025-24238 1Apple 4Ipados Iphone OsMacos+1 more Jun 17, 2026 Mar 31, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevat...Show more A logic issue was addressed with improved checks. This issue is fixed in iOS 18.4 and iPadOS 18.4, macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5, tvOS 18.4, watchOS 11.4. An app may be able to gain elevated privileges.Show less
CVE-2025-24234 1Apple 1Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A malicious app may be able to gain root privileges.
CVE-2025-24207 1Apple 1Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user cons...Show more A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to enable iCloud storage features without user consent.Show less
CVE-2025-24195 1Apple 1Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 An integer overflow was addressed with improved input validation. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. A user may be able to elevate privileges.
CVE-2025-24172 1Apple 1Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. "Block All Remote Content" may not apply for all mail previews...Show more A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. "Block All Remote Content" may not apply for all mail previews.Show less
CVE-2025-24170 1Apple 1Macos Jun 17, 2026 Mar 31, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 A logic issue was addressed with improved file handling. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to gain root privileges.
CVE-2025-2782 - - Aug 8, 2026 Mar 28, 2025 6.3 MEDIUM· v4 N/A· v3 N/A· v2 The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privil...Show more The WatchGuard Terminal Services Agent on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.Show less
CVE-2025-2781 - - Aug 8, 2026 Mar 28, 2025 6.3 MEDIUM· v4 N/A· v3 N/A· v2 The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM pri...Show more The WatchGuard Mobile VPN with SSL Client on Windows does not properly configure directory permissions when installed in a non-default directory. This could allow an authenticated local attacker to escalate to SYSTEM privileges on a vulnerable system.Show less
CVE-2025-25535 - - Jun 17, 2026 Mar 26, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 HTTP Response Manipulation in SCRIPT CASE v.1.0.002 Build7 allows a remote attacker to escalate privileges via a crafted request.
CVE-2024-53351 1Linuxfoundation 1Pipecd Jun 17, 2026 Mar 21, 2025 N/A· v4 9.8 CRITICAL· v3 N/A· v2 Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.
CVE-2025-27612 - - Jun 17, 2026 Mar 21, 2025 N/A· v4 5.9 MEDIUM· v3 N/A· v2 libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic he...Show more libcontainer is a library for container control. Prior to libcontainer 0.5.3, while creating a tenant container, the tenant builder accepts a list of capabilities to be added in the spec of tenant container. The logic here adds the given capabilities to all capabilities of main container if present in spec, otherwise simply set provided capabilities as capabilities of the tenant container. However, setting inherited caps in any case for tenant container can lead to elevation of capabilities, similar to CVE-2022-29162. This does not affect youki binary itself. This is only applicable if you are using libcontainer directly and using the tenant builder.Show less
CVE-2025-24915 - - Jun 17, 2026 Mar 21, 2025 N/A· v4 7.8 HIGH· v3 N/A· v2 When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if...Show more When installing Nessus Agent to a non-default location on a Windows host, Nessus Agent versions prior to 10.8.3 did not enforce secure permissions for sub-directories. This could allow for local privilege escalation if users had not secured the directories in the non-default installation location.Show less
CVE-2024-54564 1Apple 4Ipados Iphone OsMacos+1 more Jun 17, 2026 Mar 21, 2025 N/A· v4 6.5 MEDIUM· v3 N/A· v2 This issue was addressed through improved state management. This issue is fixed in iOS 17.6 and iPadOS 17.6, macOS Sonoma 14.6, visionOS 1.3. A file received from AirDrop may not have the quarantine flag applied.

Previous 1...151617...79 Next