CWE-276— Incorrect Default Permissions
During installation, installed file permissions are set to allow anyone to modify those files.— MITRE CWE catalog
1,759 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →
CVEs classified under CWE-276page 27 of 36
- CVE-2025-31261MEDIUMCVSS 5.5EG 5.52025-05-29
A permissions issue was addressed with additional sandbox restrictions. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma 14.7.5, macOS Ventura 13.7.5. An app may be able to access protected user data.
- CVE-2024-0245MEDIUMCVSS 5.5EG 5.52025-03-20
A misconfiguration in the AndroidManifest.xml file in hamza417/inure before build97 allows for task hijacking. This vulnerability permits malicious applications to inherit permissions of the vulnerable app, potentially leading to the expos…
- CVE-2025-21106MEDIUMCVSS 5.5EG 5.52025-02-20
Dell Recover Point for Virtual Machines 6.0.X contains a Weak file system permission vulnerability. A low privileged Local attacker could potentially exploit this vulnerability, leading to impacting only non-sensitive resources in the syst…
- CVE-2024-45819MEDIUMCVSS 5.5EG 5.52024-12-19
PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into guest memory. While actually used parts of the local memory are filled in correctly…
- CVE-2024-51765MEDIUMCVSS 5.5EG 5.52024-11-15
A security vulnerability has been identified in HPE Cray Data Virtualization Service (DVS). Depending on configuration, this vulnerability may lead to local/cluster unauthorized access.
- CVE-2024-51764MEDIUMCVSS 5.5EG 5.52024-11-15
A security vulnerability has been identified in HPE Data Management Framework (DMF) Suite (CXFS). Depending on configuration, this vulnerability may lead to local/cluster unauthorized access.
- CVE-2024-43086MEDIUMCVSS 5.5EG 5.52024-11-13
In validateAccountsInternal of AccountManagerService.java, there is a possible way to leak account credentials to a third party app due to a confused deputy. This could lead to local information disclosure with no additional execution priv…
- CVE-2024-47240MEDIUMCVSS 5.5EG 5.52024-10-18
Dell Secure Connect Gateway (SCG) 5.24 contains an Incorrect Default Permissions vulnerability. A local attacker with low privileges can access the file system and could potentially exploit this vulnerability to gain write access to unauth…
- CVE-2024-5474MEDIUMCVSS 5.5EG 5.52024-10-11
A potential information disclosure vulnerability was reported in Lenovo's packaging of Dolby Vision Provisioning software prior to version 2.0.0.2 that could allow a local attacker to read files on the system with elevated privileges durin…
- CVE-2024-44151MEDIUMCVSS 5.5EG 5.52024-09-17
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7, macOS Ventura 13.7. An app may be able to modify protected parts of the file system.
- CVE-2024-44135MEDIUMCVSS 5.5EG 5.52024-09-17
A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15, macOS Sonoma 14.7. An app may be able to access protected files within an App Sandbox container.
- CVE-2024-34018MEDIUMCVSS 5.5EG 5.52024-08-29
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Snap Deploy (Windows) before build 4569.
- CVE-2024-6122MEDIUMCVSS 5.5EG 5.52024-07-22
An incorrect permission in the installation directory for the shared NI SystemLink Server KeyValueDatabase service may result in information disclosure via local access. This affects NI SystemLink Server 2024 Q1 and prior versions. It al…
- CVE-2024-6326MEDIUMCVSS 5.5EG 5.52024-07-16
An exposure of sensitive information vulnerability exists in the Rockwell Automation FactoryTalk® System Service. A malicious user could exploit this vulnerability by starting a back-up or restore process, which temporarily exposes priva…
- CVE-2024-31312MEDIUMCVSS 5.5EG 5.52024-07-09
In multiple locations, there is a possible information leak due to a missing permission check. This could lead to local information disclosure exposing played media with no additional execution privileges needed. User interaction is not ne…
- CVE-2024-29962MEDIUMCVSS 5.5EG 5.52024-04-19
Brocade SANnav OVA before v2.3.1 and v2.3.0a have an insecure file permission setting that makes files world-readable. This could allow a local user without the required privileges to access sensitive information or a Java binary.
- CVE-2024-25654MEDIUMCVSS 5.5EG 5.52024-03-18
Insecure permissions for log files of AVSystem Unified Management Platform (UMP) 23.07.0.16567~LTS allow members (with local access to the UMP application server) to access credentials to authenticate to all services, and to decrypt sensit…
- CVE-2024-20671MEDIUMCVSS 5.5EG 5.52024-03-12
Microsoft Defender Security Feature Bypass Vulnerability
- CVE-2023-48678MEDIUMCVSS 5.5EG 5.52024-02-27
Sensitive information disclosure due to insecure folder permissions. The following products are affected: Acronis Cyber Protect 16 (Linux, Windows) before build 37391.
- CVE-2023-42953MEDIUMCVSS 5.5EG 5.52024-02-21
A permissions issue was addressed with additional restrictions. This issue is fixed in tvOS 17.1, watchOS 10.1, macOS Sonoma 14.1, iOS 17.1 and iPadOS 17.1. An app may be able to access sensitive user data.
- CVE-2024-22430MEDIUMCVSS 5.5EG 5.52024-02-01
Dell PowerScale OneFS versions 8.2.x through 9.6.0.x contains an incorrect default permissions vulnerability. A local low privileges malicious user could potentially exploit this vulnerability, leading to denial of service.
- CVE-2023-29081MEDIUMCVSS 5.5EG 5.52024-01-26
A vulnerability has been reported in Suite Setups built with versions prior to InstallShield 2023 R2. This vulnerability may allow locally authenticated users to cause a Denial of Service (DoS) condition when handling move operations on lo…
- CVE-2022-4964MEDIUMCVSS 5.5EG 5.52024-01-24
Ubuntu's pipewire-pulse in snap grants microphone access even when the snap interface for audio-record is not set.
- CVE-2024-23301MEDIUMCVSS 5.5EG 5.52024-01-12
Relax-and-Recover (aka ReaR) through 2.7 creates a world-readable initrd when using GRUB_RESCUE=y. This allows local attackers to gain access to system secrets otherwise only readable by root.
- CVE-2022-45793MEDIUMCVSS 5.5EG 5.52024-01-10
Sysmac Studio installs executables in a directory with poor permissions. This can allow a locally-authenticated attacker to overwrite files which will result in code execution with privileges of a different user.
- CVE-2023-40076MEDIUMCVSS 5.5EG 5.52023-12-04
In createPendingIntent of CredentialManagerUi.java, there is a possible way to access credentials from other users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed…
- CVE-2023-4065MEDIUMCVSS 5.5EG 5.52023-09-27
A flaw was found in Red Hat AMQ Broker Operator, where it displayed a password defined in ActiveMQArtemisAddress CR, shown in plain text in the Operator Log. This flaw allows an authenticated local attacker to access information outside of…
- CVE-2023-30902MEDIUMCVSS 5.5EG 5.52023-06-26
A privilege escalation vulnerability in the Trend Micro Apex One and Apex One as a Service agent could allow a local attacker to unintentionally delete privileged Trend Micro registry keys including its own protected registry keys on affec…
- CVE-2023-32407MEDIUMCVSS 5.5EG 5.52023-06-23
A logic issue was addressed with improved state management. This issue is fixed in watchOS 9.5, tvOS 16.5, macOS Ventura 13.4, iOS 15.7.6 and iPadOS 15.7.6, macOS Big Sur 11.7.7, macOS Monterey 12.6.6, iOS 16.5 and iPadOS 16.5. An app may …
- CVE-2023-32404MEDIUMCVSS 5.5EG 5.52023-06-23
This issue was addressed with improved entitlements. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, macOS Ventura 13.4. An app may be able to bypass Privacy preferences.
- CVE-2023-32399MEDIUMCVSS 5.5EG 5.52023-06-23
The issue was addressed with improved handling of caches. This issue is fixed in iOS 16.5 and iPadOS 16.5, watchOS 9.5, tvOS 16.5, macOS Ventura 13.4. An app may be able to read sensitive location information.
- CVE-2023-21104MEDIUMCVSS 5.5EG 5.52023-05-15
In applySyncTransaction of WindowOrganizer.java, a missing permission check could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions…
- CVE-2023-28192MEDIUMCVSS 5.5EG 5.52023-05-08
A permissions issue was addressed with improved validation. This issue is fixed in macOS Ventura 13.3, macOS Monterey 12.6.4, macOS Big Sur 11.7.5. An app may be able to read sensitive location information.
- CVE-2022-3146MEDIUMCVSS 5.5EG 5.52023-03-23
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and …
- CVE-2022-3101MEDIUMCVSS 5.5EG 5.52023-03-23
A flaw was found in tripleo-ansible. Due to an insecure default configuration, the permissions of a sensitive file are not sufficiently restricted. This flaw allows a local attacker to use brute force to explore the relevant directory and …
- CVE-2022-47450MEDIUMCVSS 5.5EG 5.52023-02-12
In wlan driver, there is a possible missing permission check. This could lead to local information disclosure.
- CVE-2022-20511MEDIUMCVSS 5.5EG 5.52022-12-16
In getNearbyAppStreamingPolicy of DevicePolicyManagerService.java, there is a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for expl…
- CVE-2022-20448MEDIUMCVSS 5.5EG 5.52022-11-08
In buzzBeepBlinkLocked of NotificationManagerService.java, there is a possible way to share data across users due to a permissions bypass. This could lead to local escalation of privilege with no additional execution privileges needed. Use…
- CVE-2013-4281MEDIUMCVSS 5.5EG 5.52022-10-19
In Red Hat Openshift 1, weak default permissions are applied to the /etc/openshift/server_priv.pem file on the broker server, which could allow users with local access to the broker to read this file.
- CVE-2021-46834MEDIUMCVSS 5.5EG 5.52022-09-20
A permission bypass vulnerability in Huawei cross device task management could allow an attacker to access certain resource in the attacked devices. Affected product versions include:JAD-AL50 versions 102.0.0.225(C00E220R3P4).
- CVE-2021-3917MEDIUMCVSS 5.5EG 5.52022-08-23
A flaw was found in the coreos-installer, where it writes the Ignition config to the target system with world-readable access permissions. This flaw allows a local attacker to have read access to potentially sensitive data. The highest thr…
- CVE-2022-27500MEDIUMCVSS 5.5EG 5.52022-08-18
Incorrect default permissions for the Intel(R) Support Android application before 21.07.40 may allow an authenticated user to potentially enable information disclosure via local access.
- CVE-2021-44470MEDIUMCVSS 5.5EG 5.52022-08-18
Incorrect default permissions for the Intel(R) Connect M Android application before version 1.7.4 may allow an authenticated user to potentially enable information disclosure via local access.
- CVE-2022-20341MEDIUMCVSS 5.5EG 5.52022-08-12
In ConnectivityService, there is a possible bypass of network permissions due to a missing permission check. This could lead to local information disclosure of tethering interfaces with no additional execution privileges needed. User inter…
- CVE-2022-20322MEDIUMCVSS 5.5EG 5.52022-08-12
In PackageManager, there is a possible installed package disclosure due to a missing permission check. This could lead to local information disclosure with no additional execution privileges needed. User interaction is not needed for explo…
- CVE-2022-20312MEDIUMCVSS 5.5EG 5.52022-08-12
In WifiP2pManager, there is a possible toobtain WiFi P2P MAC address without user consent due to missing permission check. This could lead to local information disclosure without additional execution privileges needed. User interaction is …
- CVE-2022-20303MEDIUMCVSS 5.5EG 5.52022-08-12
In ContentService, there is a possible way to determine if an account is on the device without GET_ACCOUNTS permission due to a missing permission check. This could lead to local information disclosure with User execution privileges needed…
- CVE-2022-20301MEDIUMCVSS 5.5EG 5.52022-08-12
In Content, there is a possible way to check if an account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed for ex…
- CVE-2022-20300MEDIUMCVSS 5.5EG 5.52022-08-12
In Content, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not needed…
- CVE-2022-20299MEDIUMCVSS 5.5EG 5.52022-08-12
In ContentService, there is a possible way to check if the given account exists on the device due to a missing permission check. This could lead to local information disclosure with User execution privileges needed. User interaction is not…
Map vulnerabilities like CWE-276 to your infrastructure
EchelonGraph correlates every CVE — across CWE-276 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.
Book a Demo →