CWE-277 · 66 records
Insecure Inherited Permissions
CVEs in this class
66 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2024-27822Weaponized | A logic issue was addressed with improved restrictions.apple · macos · CWE-277 | High7.8 | — | 1.4% | May 14, 2024 |
39Monitor | CVE-2024-36539Proof of concept | Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account'sprojectcontour · contour · CWE-277 | Critical9.8 | — | 1.2% | Jul 24, 2024 |
39Monitor | CVE-2024-36540No exploit | Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service external-secrets · external secrets operator · CWE-277 | Critical9.8 | — | 0.4% | Jul 24, 2024 |
36Monitor | CVE-2023-27842Proof of concept | Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code viaextplorer · extplorer · CWE-277 | High8.8 | — | 2.3% | Mar 21, 2023 |
35Monitor | CVE-2024-36542No exploit | Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's tokCWE-277 | High8.8 | — | 0.4% | Jul 25, 2024 |
35Monitor | CVE-2024-6605No exploit | Firefox Android missed activation delay to prevent tapjackingmozilla · firefox · CWE-277 | High8.8 | — | 0.3% | Jul 9, 2024 |
33Monitor | CVE-2024-7143No exploit | Pulpcore: rbac permissions incorrectly assigned in tasks that create objectspulpproject · pulp · CWE-277 | High8.3 | — | 0.6% | Aug 7, 2024 |
33Monitor | CVE-2024-34329Proof of concept | Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticatedCWE-277 | High8.4 | — | 0.5% | Jul 22, 2024 |
33Monitor | CVE-2024-29417No exploit | Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password resCWE-277 | High8.4 | — | 0.1% | May 3, 2024 |
32Monitor | CVE-2025-58437No exploit | Coder's privilege escalation vulnerability could lead to a cross workspace compromisecoder · coder · CWE-277 | High8.1 | — | 0.3% | Sep 5, 2025 |
31Monitor | CVE-2020-5343No exploit | Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permissdell · os recovery image for microsoft windows 10 · CWE-277 | High7.8 | — | 0.2% | May 4, 2020 |
31Monitor | CVE-2024-23233No exploit | This issue was addressed with improved checks.apple · macos · CWE-277 | High7.8 | — | 0.2% | Mar 7, 2024 |
31Monitor | CVE-2023-39230No exploit | Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user intel · rapid storage technology · CWE-277 | High7.8 | — | 0.1% | Nov 14, 2023 |
31Monitor | CVE-2023-45736No exploit | Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially enaintel · power gadget · CWE-277 | High7.8 | — | 0.1% | May 16, 2024 |
31Monitor | CVE-2023-34314No exploit | Insecure inherited permissions in some Intel(R) Simics Simulator software before version 1.7.2 may allow an authenticated user to potentiallintel · simics simulator · CWE-277 | High7.8 | — | 0.1% | Nov 14, 2023 |
31Monitor | CVE-2023-34997No exploit | Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an authintel · server configuration utility · CWE-277 | High7.8 | — | 0.1% | Nov 14, 2023 |
31Monitor | CVE-2026-30266No exploit | Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a crafdeepcool · deepcreative · CWE-277 | High7.8 | — | 0.1% | Apr 20, 2026 |
31Monitor | CVE-2022-41700No exploit | Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticatintel · nuc pro software suite · CWE-277 | High7.8 | — | 0.1% | Nov 14, 2023 |
31Monitor | CVE-2023-33870No exploit | Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially enintel · administrative tools for intel network adapters · CWE-277 | High7.8 | — | 0.1% | Feb 14, 2024 |
31Monitor | CVE-2022-33898No exploit | Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated intel · nuc watchdog timer utility · CWE-277 | High7.8 | — | 0.1% | Nov 14, 2023 |
31Monitor | CVE-2024-21835No exploit | Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable intel · extreme tuning utility · CWE-277 | High7.8 | — | 0.1% | May 16, 2024 |
31Monitor | CVE-2022-41658No exploit | Insecure inherited permissions in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentiaintel · vtune profiler · CWE-277 | High7.8 | — | 0.1% | May 10, 2023 |
31Monitor | CVE-2022-46656No exploit | Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentiallyintel · nuc pro software suite · CWE-277 | High7.8 | — | 0.1% | May 10, 2023 |
31Monitor | CVE-2022-41687No exploit | Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.4intel · nuc p14e laptop element · CWE-277 | High7.8 | — | 0.1% | May 10, 2023 |
31Monitor | CVE-2022-38103No exploit | Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated useintel · nuc software studio service · CWE-277 | High7.8 | — | 0.1% | May 10, 2023 |
- CVE-2024-2782240Plan
A logic issue was addressed with improved restrictions.
HighCVSS 7.8WeaponizedEPSS 1%apple · macosMay 14, 2024
- CVE-2024-3653939Monitor
Insecure permissions in contour v1.28.3 allows attackers to access sensitive data and escalate privileges by obtaining the service account's
CriticalCVSS 9.8Proof of conceptEPSS 1%projectcontour · contourJul 24, 2024
- CVE-2024-3654039Monitor
Insecure permissions in external-secrets v0.9.16 allows attackers to access sensitive data and escalate privileges by obtaining the service
CriticalCVSS 9.8No exploitEPSS 0%external-secrets · external secrets operatorJul 24, 2024
- CVE-2023-2784236Monitor
Insecure Permissions vulnerability found in Extplorer File manager eXtplorer v.2.1.15 allows a remote attacker to execute arbitrary code via
HighCVSS 8.8Proof of conceptEPSS 2%extplorer · extplorerMar 21, 2023
- CVE-2024-3654235Monitor
Insecure permissions in kuma v2.7.0 allows attackers to access sensitive data and escalate privileges by obtaining the service account's tok
HighCVSS 8.8No exploitEPSS 0%Jul 25, 2024
- CVE-2024-660535Monitor
Firefox Android missed activation delay to prevent tapjacking
HighCVSS 8.8No exploitEPSS 0%mozilla · firefoxJul 9, 2024
- CVE-2024-714333Monitor
Pulpcore: rbac permissions incorrectly assigned in tasks that create objects
HighCVSS 8.3No exploitEPSS 0%pulpproject · pulpAug 7, 2024
- CVE-2024-3432933Monitor
Insecure permissions in Entrust Datacard XPS Card Printer Driver 8.5 and earlier without the dxp1-patch-E24-004 patch allows unauthenticated
HighCVSS 8.4Proof of conceptEPSS 0%Jul 22, 2024
- CVE-2024-2941733Monitor
Insecure Permissions vulnerability in e-trust Horacius 1.0, 1.1, and 1.2 allows a local attacker to escalate privileges via the password res
HighCVSS 8.4No exploitEPSS 0%May 3, 2024
- CVE-2025-5843732Monitor
Coder's privilege escalation vulnerability could lead to a cross workspace compromise
HighCVSS 8.1No exploitEPSS 0%coder · coderSep 5, 2025
- CVE-2020-534331Monitor
Dell Client platforms restored using a Dell OS recovery image downloaded before December 20, 2019, may contain an insecure inherited permiss
HighCVSS 7.8No exploitEPSS 0%dell · os recovery image for microsoft windows 10May 4, 2020
- CVE-2024-2323331Monitor
This issue was addressed with improved checks.
HighCVSS 7.8No exploitEPSS 0%apple · macosMar 7, 2024
- CVE-2023-3923031Monitor
Insecure inherited permissions in some Intel Rapid Storage Technology software before version 16.8.5.1014.9 may allow an authenticated user
HighCVSS 7.8No exploitEPSS 0%intel · rapid storage technologyNov 14, 2023
- CVE-2023-4573631Monitor
Insecure inherited permissions in Intel(R) Power Gadget software for Windows all versions may allow an authenticated user to potentially ena
HighCVSS 7.8No exploitEPSS 0%intel · power gadgetMay 16, 2024
- CVE-2023-3431431Monitor
Insecure inherited permissions in some Intel(R) Simics Simulator software before version 1.7.2 may allow an authenticated user to potentiall
HighCVSS 7.8No exploitEPSS 0%intel · simics simulatorNov 14, 2023
- CVE-2023-3499731Monitor
Insecure inherited permissions in the installer for some Intel Server Configuration Utility software before version 16.0.9 may allow an auth
HighCVSS 7.8No exploitEPSS 0%intel · server configuration utilityNov 14, 2023
- CVE-2026-3026631Monitor
Insecure Permissions vulnerability in DeepCool DeepCreative v.1.2.12 and before allows a local attacker to execute arbitrary code via a craf
HighCVSS 7.8No exploitEPSS 0%deepcool · deepcreativeApr 20, 2026
- CVE-2022-4170031Monitor
Insecure inherited permissions in some Intel(R) NUC Pro Software Suite installation software before version 2.0.0.9 may allow an authenticat
HighCVSS 7.8No exploitEPSS 0%intel · nuc pro software suiteNov 14, 2023
- CVE-2023-3387031Monitor
Insecure inherited permissions in some Intel(R) Ethernet tools and driver install software may allow an authenticated user to potentially en
HighCVSS 7.8No exploitEPSS 0%intel · administrative tools for intel network adaptersFeb 14, 2024
- CVE-2022-3389831Monitor
Insecure inherited permissions in some Intel(R) NUC Watchdog Timer installation software before version 2.0.21.0 may allow an authenticated
HighCVSS 7.8No exploitEPSS 0%intel · nuc watchdog timer utilityNov 14, 2023
- CVE-2024-2183531Monitor
Insecure inherited permissions in some Intel(R) XTU software before version 7.14.0.15 may allow an authenticated user to potentially enable
HighCVSS 7.8No exploitEPSS 0%intel · extreme tuning utilityMay 16, 2024
- CVE-2022-4165831Monitor
Insecure inherited permissions in the Intel(R) VTune(TM) Profiler software before version 2023.0 may allow an authenticated user to potentia
HighCVSS 7.8No exploitEPSS 0%intel · vtune profilerMay 10, 2023
- CVE-2022-4665631Monitor
Insecure inherited permissions for the Intel(R) NUC Pro Software Suite before version 2.0.0.3 may allow an authenticated user to potentially
HighCVSS 7.8No exploitEPSS 0%intel · nuc pro software suiteMay 10, 2023
- CVE-2022-4168731Monitor
Insecure inherited permissions in the HotKey Services for some Intel(R) NUC P14E Laptop Element software for Windows 10 before version 1.1.4
HighCVSS 7.8No exploitEPSS 0%intel · nuc p14e laptop elementMay 10, 2023
- CVE-2022-3810331Monitor
Insecure inherited permissions in the Intel(R) NUC Software Studio Service installer before version 1.17.38.0 may allow an authenticated use
HighCVSS 7.8No exploitEPSS 0%intel · nuc software studio serviceMay 10, 2023