CWE-863
4,558 CVEs • Abstraction: Class • Likelihood of Exploit: High
Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check. This allows attackers to bypass intended access restrictions.
CVEs (4,558)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the v...Show more |
Adobe Experience Manager is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user, potentially gaining elevated access or control over the v...Show more |
Incorrect authorization in the library-query execution endpoint in Lowcoder version, up to and including 2.4.10, allows an authenticated administrator or developer in one organization to execute a library query belonging...Show more |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreOct 16, 2026 Oct 13, 2026 N/A· v4 7.8 HIGH· v3 N/A· v2 Improper access control in Windows NTFS allows an authorized attacker to elevate privileges locally. |
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read...Show more |
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in arbitrary code execution in the context of the current user. An attacker could exploit this vulnerability to execute arbitrary c...Show more |
Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unau...Show more |
1Microsoft 13Windows 10 1607 Windows 10 1809Windows 10 21h2+10 moreOct 20, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper authorization in Windows Encrypting File System (EFS) allows an authorized attacker to perform tampering locally. |
1Microsoft 7Windows 11 23h2 Windows 11 24h2Windows 11 25h2+4 moreOct 19, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Incorrect authorization in Windows SMB Client allows an authorized attacker to bypass a security feature locally. |
Incorrect authorization in Windows Device Install Service allows an authorized attacker to elevate privileges locally. |
Incorrect authorization in Windows Hyper-V allows an authorized attacker to bypass a security feature over an adjacent network. |
Incorrect authorization in Windows Clipboard User Service allows an authorized attacker to disclose information locally. |
Incorrect authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. |
Improper access control in Windows Bind Filter Driver allows an authorized attacker to elevate privileges locally. |
Incorrect authorization in Windows Hello allows an authorized attacker to bypass a security feature locally. |
Incorrect authorization in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. |
Incorrect authorization in Active Directory Domain Services allows an unauthorized attacker to execute code over a network. |
1Microsoft 7Windows 10 1607 Windows 10 1809Windows Server 2012+4 moreOct 16, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Incorrect authorization in DNS Server allows an authorized attacker to bypass a security feature locally. |
1Microsoft 7Windows 10 1607 Windows 10 1809Windows Server 2012+4 moreOct 16, 2026 Oct 13, 2026 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Incorrect authorization in DNS Server allows an authorized attacker to perform tampering locally. |
Incorrect authorization in Windows Routing and Remote Access Service (RRAS) allows an authorized attacker to bypass a security feature locally. |