cve.bz

CWE-264: Permissions, Privileges, and Access Controls

Filter

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

What the weakness is: CWE-264 at MITRE

Ask an AI about CWE-264

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-264: Permissions, Privileges, and Access Controls and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/264.html and https://cve.bz/cve/cwe/264?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2026-101184

    Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

  2. 3.7CVE-2026-101177

    Permission control vulnerability in the Optimizer module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  3. 7.1CVE-2026-101176

    Permission control vulnerability in the event notification management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  4. 6.2CVE-2026-101172

    Permission control vulnerability in the graphics module. Impact: Successful exploitation of this vulnerability may affect confidentiality.

  5. 3.6CVE-2026-101171

    Permission control vulnerability in the background task management module. Impact: Successful exploitation of this vulnerability may affect service integrity.

  6. 5.3CVE-2026-116367EPSS 0.3%

    A vulnerability was found in DeepSeek Harness up to 0.1.0-rc.5. This vulnerability affects the function createContext of the file packages/extensions/cordis-host-runner/src/sandbox.ts. The manipulation results in sandbox issue. It is possi…

  7. 9.9CVE-2026-96012EPSS 0.3%

    IBM Db2 Mirror for i 7.4, 7.5, and 7.6 is vulnerable to privilege escalation. An authenticated attacker could craft a malicious request that bypasses additional authorization and input validation checks to execute malicious code. An attack…

  8. 1.9CVE-2026-108788EPSS 0.1%

    A vulnerability was determined in deepseek-ai deepseek-harness up to 0.1.1-rc.2. The impacted element is the function spawn of the component Sandbox. Executing a manipulation of the argument Profile can lead to sandbox issue. It is possibl…

  9. 6.5CVE-2026-76488EPSS 0.3%

    A vulnerability in the export policies functionality of Cisco Application Policy Infrastructure Controller (APIC) could allow an authenticated, remote attacker to access sensitive files on an affected device. To exploit this vulnerability,…

  10. 5.3CVE-2026-101102EPSS 0.2%

    A vulnerability was found in deepseek-ai deepseek-harness up to 0.1.0-rc.7. Impacted is the function run_code of the component Code Mode Sandbox. The manipulation results in sandbox issue. The attack can be executed remotely. The vendor's …

  11. 8.5CVE-2026-76412EPSS 0.4%

    A vulnerability in the remote diagnostics debugger of Cisco Secure FMC Software could allow an authenticated, remote attacker to enable the remote diagnostics debugger service. This vulnerability is due to an error when checking the pri…

  12. 4.3CVE-2026-81644EPSS 0.2%

    DoS vulnerability in the preview service module. Impact: Successful exploitation of this vulnerability may affect availability.

  13. 7.1CVE-2026-49315EPSS 0.1%

    DoS vulnerability in the input device module. Impact: Successful exploitation of this vulnerability may affect availability.

  14. 5.5CVE-2026-49313EPSS 0.1%

    Permission control vulnerability in the app lock module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  15. 4.0CVE-2026-49312EPSS 0.1%

    Permission control vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  16. 8.6CVE-2026-49310EPSS 0.4%

    Permission control vulnerability in the event notification module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  17. 4.8CVE-2026-49309EPSS 0.1%

    Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  18. 6.2CVE-2026-41987EPSS 0.1%

    Permission control vulnerability in the app management module. Impact: Successful exploitation of this vulnerability may affect availability.

  19. 5.5CVE-2026-49308EPSS 0.1%

    Permission control vulnerability in the clipboard module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  20. 6.2CVE-2026-49304EPSS 0.1%

    Permission control vulnerability in the device key management module. Impact: Successful exploitation of this vulnerability may affect availability.

  21. 5.1CVE-2026-49303EPSS 0.1%

    Permission control vulnerability in the notification module. Impact: Successful exploitation of this vulnerability may affect availability.

  22. 2.9CVE-2026-18593EPSS 0.4%

    A weakness has been identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown part of the file backend/pkg/templates/prompts/pentester.tmpl of the component Tool Management Protocol Handler. Executing a manipulation can lead to …

  23. 5.1CVE-2026-58556EPSS 0.1%

    Permission control vulnerability in the Bluetooth module. Impact: Successful exploitation of this vulnerability may affect availability.

  24. 6.6CVE-2026-58555EPSS 0.1%

    Permission bypass vulnerability in the card module. Impact: Successful exploitation of this vulnerability may affect availability.

  25. 5.3CVE-2026-14784EPSS 0.4%

    A vulnerability was identified in vxcontrol PentAGI up to 2.1.0. This affects an unknown function of the file backend/pkg/docker/client.go of the component Docker API. The manipulation leads to sandbox issue. The attack may be initiated re…

  26. 3.6CVE-2026-41974EPSS 0.07%

    Permission control vulnerability in service notifications. Impact: Successful exploitation of this vulnerability may affect availability.

  27. 5.5CVE-2026-9368EPSS 0.4%

    A vulnerability was identified in NousResearch hermes-agent up to 2026.4.16. This impacts the function execute_code of the file tools/code_execution_tool.py of the component Environment Variable Handler. Such manipulation leads to sandbox …

  28. 3.6CVE-2026-41962EPSS 0.08%

    Permission control vulnerability in the app management and control module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  29. 2.9CVE-2026-6878EPSS 0.3%

    A vulnerability was identified in ByteDance verl up to 0.7.0. Affected is the function math_equal of the file prime_math/grader.py. The manipulation leads to sandbox issue. It is possible to initiate the attack remotely. The complexity of …

  30. 5.5CVE-2026-6224EPSS 0.3%

    A security flaw has been discovered in nocobase plugin-workflow-javascript up to 2.0.23. This issue affects the function createSafeConsole of the file packages/plugins/@nocobase/plugin-workflow-javascript/src/server/Vm.js. Performing a man…

  31. 2.1CVE-2026-6117EPSS 0.2%

    A vulnerability was found in AstrBotDevs AstrBot up to 4.22.1. This issue affects the function install_plugin_upload of the file astrbot/dashboard/routes/plugin.py of the component install-upload Endpoint. The manipulation of the argument …

  32. 8.8CVE-2026-20046EPSS 0.1%

    A vulnerability in task group assignment for a specific CLI command in Cisco IOS XR Software could allow an authenticated, local attacker to elevate privileges and gain full administrative control of an affected device. This vulnerabili…

  33. 5.5CVE-2026-28541EPSS 0.10%

    Permission control vulnerability in the cellular_data module. Impact: Successful exploitation of this vulnerability may affect availability.

  34. 5.5CVE-2025-66319EPSS 0.1%

    Permission control vulnerability in the resource scheduling module. Impact: Successful exploitation of this vulnerability may affect service integrity.

  35. 5.5CVE-2026-24924EPSS 0.1%

    Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  36. 5.5CVE-2026-24920EPSS 0.1%

    Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.

  37. 5.5CVE-2026-24931EPSS 0.1%

    Vulnerability of improper criterion security check in the card module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  38. 5.5CVE-2026-24923EPSS 0.1%

    Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  39. 5.5CVE-2025-68967EPSS 0.1%

    Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  40. 5.5CVE-2025-66329EPSS 0.09%

    Permission control vulnerability in the window management module. Impact: Successful exploitation of this vulnerability may affect availability.

  41. 5.5CVE-2025-66325EPSS 0.09%

    Permission control vulnerability in the package management module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  42. 5.5CVE-2025-58302EPSS 0.1%

    Permission control vulnerability in the Settings module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  43. 7.1CVE-2025-64315EPSS 0.10%

    Configuration defect vulnerability in the file management module. Impact: Successful exploitation of this vulnerability may affect app data confidentiality and integrity.

  44. 5.5CVE-2025-58315EPSS 0.10%

    Permission control vulnerability in the Wi-Fi module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  45. 5.5CVE-2025-58312EPSS 0.08%

    Permission control vulnerability in the App Lock module. Impact: Successful exploitation of this vulnerability may affect availability.

  46. 7.1CVE-2025-58309EPSS 0.10%

    Permission control vulnerability in the startup recovery module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiality.

  47. 5.5CVE-2025-58294EPSS 0.10%

    Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  48. 5.5CVE-2025-58293EPSS 0.09%

    Vulnerability of improper exception handling in the print module. Successful exploitation of this vulnerability may affect availability.

  49. 5.5CVE-2025-58285EPSS 0.09%

    Permission control vulnerability in the media module. Successful exploitation of this vulnerability may affect service confidentiality.

  50. 5.5CVE-2025-58284EPSS 0.10%

    Permission control vulnerability in the network module. Successful exploitation of this vulnerability may affect service confidentiality.