CWE-378

49 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 23Medium 17Low 8Not scored 0

CVEs per yearBy the year they were published

CVE-2026-97026
Flatpak: flatpak: world-writable temporary child repositories in system-helper cache path
Red Hat · Red Hat Enterprise Linux 10
Low3.9
CVE-2026-97025
Flatpak: flatpak: world-readable oci authentication token in system-helper cache path
Red Hat · Red Hat Enterprise Linux 10
Low3.2
CVE-2026-25265
Creation of Temporary File with Insecure Permissions in Qualcomm Software Center
Qualcomm, Inc. · Snapdragon
High8.8
CVE-2026-46388
osquery: Unprivileged users can temporarily read file carve contents
osquery · osquery
Medium4.4
CVE-2026-4137
Incomplete Fix for CVE-2025-10279: Insecure Temporary Directory Permissions in mlflow/mlflow
mlflow · mlflow/mlflow
High7.0
CVE-2026-33572
OpenClaw < 2026.2.17 - Insufficient File Permissions in Session Transcript Files
OpenClaw · OpenClaw
Medium6.8
CVE-2026-4822
Enter Software Iperius Backup Backup Service temp file
Enter Software · Iperius Backup
High7.3
CVE-2026-2817
Spring Data Geode Insecure Temporary Directory Usage
VMware · Spring Data Geode
Medium4.8
CVE-2025-46685
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged…
Dell · SupportAssist OS Recovery
High7.5
CVE-2025-46684
Dell SupportAssist OS Recovery, versions prior to 5.5.15.1, contain a Creation of Temporary File With Insecure Permissions vulnerability. A low privileged…
Dell · SupportAssist OS Recovery,
Medium6.6