CWE-732
1,839 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 4 of them as exploited in the wild.
- Published CVEs
- 1,839
- Last 12 months
- 329
- Critical
- 150
- Known exploited
- 4
Critical 150High 906Medium 673Low 109Not scored 1
CVEs per yearBy the year they were published
- 20194
- 20209
- 20204
- 2025160
- 20255
- 20255
- 2026260
- 2026185
- 2026147
- 2026142
- 2026168
- 2026147
Known exploitedNewest addition to KEV first
- CVE-2018-13374
A Improper Access Control in Fortinet FortiOS 6.0.2, 5.6.7 and before, FortiADC 6.1.0, 6.0.0 to 6.0.1, 5.4.0 to 5.4.4 allows attacker to obtain the LDAP server…
Fortinet · Fortinet FortiOS, fortiADC
ExploitedMedium4.3 - CVE-2022-22960
VMware Workspace ONE Access, Identity Manager and vRealize Automation contain a privilege escalation vulnerability due to improper permissions in support…
VMware Workspace ONE Access, Identity Manager and vRealize Automation
ExploitedHigh7.8 - CVE-2021-23874
McAfee Total Protection (MTP) privilege escalation vulnerability
McAfee,LLC · McAfee Total Protection (MTP)
ExploitedHigh8.2 - CVE-2019-15752
Docker Desktop Community Edition before 2.1.0.1 allows local users to gain privileges by placing a Trojan horse docker-credential-wincred.exe file in…
Product not named
ExploitedHigh7.8
Newest CVEs
- CVE-2026-120066
psqlODBC log files are created with default permissions at a predictable path and follow symbolic links
PostgreSQL · psqlODBC
Medium5.3 - CVE-2026-91904
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…
Dell · OpenManage Enterprise
Medium5.5 - CVE-2026-91906
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…
Dell · OpenManage Enterprise
Medium5.5 - CVE-2026-68591
In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege (EoP) if a malicious actor…
MediaTek, Inc. · MediaTek chipset
Medium6.7 - CVE-2026-111499
Dell OpenManage Enterprise, versions prior to 4.8.0, contains an Incorrect Permission Assignment for Critical Resource vulnerability. A low privileged attacker…
Dell · OpenManage Enterprise
Medium5.5 - CVE-2026-118574
S3 File System - Moderately critical - Access bypass - SA-CONTRIB-2026-279
Drupal · S3 File System
Not scored - CVE-2026-107060
Insecure permissions in Tailscale versionCode 297862600 allows unauthorized attackers to make arbitrary changes to another user's VPN configurations and…
Product not named
Critical9.1 - CVE-2026-107055
Insecure permissions in the autosave component of AppML neutriNote CE versionCode 1387 allows unauthorized attackers to write arbitrary files.
Product not named
High7.5 - CVE-2026-107047
Insecure permissions in mendhak GPSLogger versionCode 137 allows unauthorized attackers to arbitrarily manipulate the app's logging mechanism and log data.
Product not named
High7.5 - CVE-2026-107044
Insecure permissions in ProjectMAXS MAXS Main v0.5.19 (versionCode 19) allows unauthorized attackers to arbitrarily manipulate the app's MAXS command/transport…
Product not named
High7.5