Vulnerabilities > Incorrect Default Permissions

DATE CVE VULNERABILITY TITLE RISK
2024-11-15 CVE-2017-13310 Incorrect Default Permissions vulnerability in Google Android
In createFromParcel of ViewPager.java, there is a possible read/write serialization issue leading to a permissions bypass.
local
low complexity
google CWE-276
7.8
2024-11-12 CVE-2024-21937 Incorrect Default Permissions vulnerability in AMD Radeon Software and Radeon Software for HIP
Incorrect default permissions in the AMD HIP SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-276
7.8
2024-11-12 CVE-2024-21938 Incorrect Default Permissions vulnerability in AMD Management Plugin for Sccm
Incorrect default permissions in the AMD Management Plugin for the Microsoft® System Center Configuration Manager (SCCM) installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-276
7.8
2024-11-12 CVE-2024-21939 Incorrect Default Permissions vulnerability in AMD Cloud Manageability Service
Incorrect default permissions in the AMD Cloud Manageability Service (ACMS) Software installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-276
7.3
2024-11-12 CVE-2024-21945 Incorrect Default Permissions vulnerability in AMD Ryzen Master Monitoring Software Development KIT
Incorrect default permissions in the AMD RyzenTM Master monitoring SDK installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-276
7.3
2024-11-12 CVE-2024-21946 Incorrect Default Permissions vulnerability in AMD Ryzen Master Utility for Overclocking Control
Incorrect default permissions in the AMD RyzenTM Master Utility installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-276
7.3
2024-11-12 CVE-2024-21957 Incorrect Default Permissions vulnerability in AMD Management Console
Incorrect default permissions in the AMD Management Console installation directory could allow an attacker to achieve privilege escalation potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-276
7.3
2024-11-12 CVE-2024-21958 Incorrect Default Permissions vulnerability in AMD Provisioning Console
Incorrect default permissions in the AMD Provisioning Console installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution.
local
low complexity
amd CWE-276
7.3
2024-11-06 CVE-2024-34679 Incorrect Default Permissions vulnerability in Samsung Android 14.0
Incorrect default permissions in Crane prior to SMR Nov-2024 Release 1 allows local attackers to access files with phone privilege.
local
low complexity
samsung CWE-276
7.1
2024-11-01 CVE-2024-9191 Incorrect Default Permissions vulnerability in Okta Verify
The Okta Device Access features, provided by the Okta Verify agent for Windows, provides access to the OktaDeviceAccessPipe, which enables attackers in a compromised device to retrieve passwords associated with Desktop MFA passwordless logins.
local
low complexity
okta CWE-276
7.8