Vulnerabilities > Improper Preservation of Permissions

DATE CVE VULNERABILITY TITLE RISK
2025-01-27 CVE-2025-24087 Improper Preservation of Permissions vulnerability in Apple Macos
The issue was addressed with additional permissions checks.
local
low complexity
apple CWE-281
5.5
2024-12-06 CVE-2024-41644 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via the dyn_param_handler_ component.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-41645 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2__amcl.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-41646 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_dwb_controller.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-41648 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_regulated_pure_pursuit_controller.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-41649 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the executor_thread_.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-12-06 CVE-2024-41650 Improper Preservation of Permissions vulnerability in Openrobotics Robot Operating System 2
Insecure Permissions vulnerability in Open Robotics Robotic Operating System 2 ROS2 navigation2 v.humble allows an attacker to execute arbitrary code via a crafted script to the nav2_costmap_2d.
network
low complexity
openrobotics CWE-281
critical
9.8
2024-09-17 CVE-2024-27795 Improper Preservation of Permissions vulnerability in Apple Macos
A permissions issue was addressed with additional restrictions.
network
low complexity
apple CWE-281
7.5
2024-09-17 CVE-2024-27858 Improper Preservation of Permissions vulnerability in Apple Macos
A permissions issue was addressed with additional restrictions.
local
low complexity
apple CWE-281
5.5
2024-09-17 CVE-2024-40770 Improper Preservation of Permissions vulnerability in Apple Macos
A permissions issue was addressed with additional restrictions.
network
low complexity
apple CWE-281
7.5