CWE-708

22 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 6Medium 11Low 5Not scored 0

CVEs per yearBy the year they were published

CVE-2026-110452
The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root…
NixOS · Nix
Medium4.0
CVE-2026-6469
PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownership
PostgreSQL
Low3.8
CVE-2026-40196
HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocation
sysadminsmedia · homebox
High8.1
CVE-2026-32691
Timing ownership claim attack on new external back-end secrets
Canonical · Juju
Medium5.3
CVE-2025-5467
Ubuntu Apport Insecure File Permissions Vulnerability
Canonical · apport
Low1.9
CVE-2025-14262
Jobs can be saved as workflows with wrong permissions on KNIME Business Hub
KNIME · KNIME Business Hub
Medium5.3
CVE-2025-5069
Incorrect Ownership Assignment in GitLab
GitLab · GitLab
Low3.5
CVE-2024-52561
A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a…
Parallels · Parallels Desktop for Mac
High7.8
CVE-2024-45417
Zoom Apps for macOS - Uncontrolled Resource Consumption
Zoom Communications, Inc · Zoom Apps for macOS
Medium6.0
CVE-2024-45426
Zoom Workplace Apps - Incorrect Ownership Assignment
Zoom Communications, Inc · Zoom Workplace Apps
Medium4.9