Vulnerabilities > Incorrect Default Permissions
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2024-08-14 | CVE-2024-26025 | Incorrect Default Permissions vulnerability in Intel Advisor and Oneapi Base Toolkit Incorrect default permissions for some Intel(R) Advisor software before version 2024.1 may allow an authenticated user to potentially enable escalation of privilege via local access. | 7.8 |
2024-08-14 | CVE-2024-27461 | Incorrect Default Permissions vulnerability in Intel Memory and Storage Tool GUI Incorrect default permissions in software installer for Intel(R) MAS (GUI) may allow an authenticated user to potentially enable denial of service via local access. | 5.5 |
2024-08-13 | CVE-2023-31349 | Incorrect Default Permissions vulnerability in AMD Uprof Incorrect default permissions in the AMD µProf installation directory could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution. | 7.8 |
2024-08-07 | CVE-2024-34616 | Incorrect Default Permissions vulnerability in Samsung Android 12.0/13.0/14.0 Improper handling of insufficient permission in KnoxDualDARPolicy prior to SMR Aug-2024 Release 1 allows local attackers to access sensitive data. | 5.5 |
2024-08-07 | CVE-2024-34617 | Incorrect Default Permissions vulnerability in Samsung Android 14.0 Improper handling of insufficient permission in Telephony prior to SMR Aug-2024 Release 1 allows local attackers to configure default Message application. | 3.3 |
2024-08-06 | CVE-2024-43114 | Incorrect Default Permissions vulnerability in Jetbrains Teamcity In JetBrains TeamCity before 2024.07.1 possible privilege escalation due to incorrect directory permissions | 7.8 |
2024-08-06 | CVE-2024-7525 | Incorrect Default Permissions vulnerability in Mozilla Firefox It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response body of requests on any site. | 8.1 |
2024-07-31 | CVE-2024-6974 | Incorrect Default Permissions vulnerability in Catonetworks Cato Client Cato Networks Windows SDP Client Local Privilege Escalation via self-upgradeThis issue affects SDP Client: before 5.10.34. | 7.8 |
2024-07-29 | CVE-2024-27888 | Incorrect Default Permissions vulnerability in Apple Macos A permissions issue was addressed by removing vulnerable code and adding additional checks. | 5.5 |
2024-07-29 | CVE-2024-40805 | Incorrect Default Permissions vulnerability in Apple products A permissions issue was addressed with additional restrictions. | 7.1 |