cve.bz

CWE-264: Permissions, Privileges, and Access Controls, page 2

Filter

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

What the weakness is: CWE-264 at MITRE

Ask an AI about CWE-264

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-264: Permissions, Privileges, and Access Controls and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/264.html and https://cve.bz/cve/cwe/264?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 5.5CVE-2025-58283EPSS 0.10%

    Permission control vulnerability in the Wi-Fi module. Successful exploitation of this vulnerability may affect service confidentiality.

  2. 5.5CVE-2025-58282EPSS 0.09%

    Permission control vulnerability in the camera module. Successful exploitation of this vulnerability may affect service confidentiality.

  3. 5.5CVE-2025-54654EPSS 0.10%

    Permission control vulnerability in the Gallery module. Successful exploitation of this vulnerability may affect service confidentiality

  4. 5.5CVE-2025-58276EPSS 0.09%

    Permission verification vulnerability in the home screen module Impact: Successful exploitation of this vulnerability may affect availability.

  5. 4.0CVE-2025-54608EPSS 0.1%

    Vulnerability that allows setting screen rotation direction without permission verification in the screen management module. Impact: Successful exploitation of this vulnerability may cause device screen orientation to be arbitrarily set.

  6. 6.2CVE-2025-53186EPSS 0.1%

    Vulnerability that allows third-party call apps to send broadcasts without verification in the audio framework module Impact: Successful exploitation of this vulnerability may affect availability.

  7. 4.8CVE-2025-53178EPSS 0.10%

    Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule reminder function of head units.

  8. 3.9CVE-2025-53177EPSS 0.10%

    Permission bypass vulnerability in the calendar storage module Impact: Successful exploitation of this vulnerability may affect the schedule syncing function of watches.

  9. 1.2CVE-2025-5874EPSS 0.3%

    A vulnerability was found in Redash up to 10.1.0/25.1.0. It has been rated as problematic. This issue affects the function run_query of the file /query_runner/python.py of the component getattr Handler. The manipulation leads to sandbox is…

  10. 7.8CVE-2025-48903EPSS 0.1%

    Permission bypass vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect availability.

  11. 5.3CVE-2025-5321EPSS 0.6%

    A vulnerability classified as critical was found in aimhubio aim up to 3.29.1. This vulnerability affects the function RestrictedPythonQuery of the file /aim/storage/query.py of the component run_view Object Handler. The manipulation of th…

  12. 5.5CVE-2025-46587EPSS 0.1%

    Permission control vulnerability in the media library module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  13. 5.8CVE-2025-20145EPSS 0.4%

    A vulnerability in the access control list (ACL) processing in the egress direction of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass a configured ACL. This vulnerability exists because certain packets a…

  14. 7.9CVE-2024-53011EPSS 0.1%

    Information disclosure may occur due to improper permission and access controls to Video Analytics engine.

  15. 7.5CVE-2024-56444EPSS 0.3%

    Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  16. 7.5CVE-2024-56440EPSS 0.2%

    Permission control vulnerability in the Connectivity module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

  17. 7.5CVE-2023-52955EPSS 0.2%

    Vulnerability of improper authentication in the ANS system service module Impact: Successful exploitation of this vulnerability may cause features to perform abnormally.

  18. 4.7CVE-2024-43064EPSS 0.08%

    Uncontrolled resource consumption when a driver, an application or a SMMU client tries to access the global registers through SMMU.

  19. 7.5CVE-2024-54104EPSS 0.2%

    Cross-process screen stack vulnerability in the UIExtension module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  20. 7.5CVE-2024-54103EPSS 0.2%

    Vulnerability of improper access control in the album module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  21. 7.8CVE-2017-9711EPSS 0.1%

    Certain unprivileged processes are able to perform IOCTL calls.

  22. 5.3CVE-2024-20371EPSS 0.5%

    A vulnerability in the access control list (ACL) programming of Cisco Nexus 3550-F Switches could allow an unauthenticated, remote attacker to send traffic that should be blocked to the management interface of an affected device.  …

  23. 5.5CVE-2024-51527EPSS 0.1%

    Permission control vulnerability in the Gallery app Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  24. 5.5CVE-2024-51524EPSS 0.1%

    Permission control vulnerability in the Wi-Fi module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  25. 6.0CVE-2024-20370EPSS 0.2%

    A vulnerability in the Cisco FXOS CLI feature on specific hardware platforms for Cisco Adaptive Security Appliance (ASA) Software and Cisco Firepower Threat Defense (FTD) Software could allow an authenticated, local attacker to elevate the…

  26. 5.5CVE-2024-45449EPSS 0.1%

    Access permission verification vulnerability in the ringtone setting module Impact: Successful exploitation of this vulnerability may affect service confidentiality.

  27. 7.5CVE-2024-45442EPSS 0.2%

    Vulnerability of permission verification for APIs in the DownloadProviderMain module Impact: Successful exploitation of this vulnerability will affect availability.

  28. 6.2CVE-2023-7265EPSS 0.1%

    Permission verification vulnerability in the lock screen module Impact: Successful exploitation of this vulnerability may affect availability

  29. 5.5CVE-2024-39670EPSS 0.1%

    Privilege escalation vulnerability in the account synchronisation module. Impact: Successful exploitation of this vulnerability will affect availability.

  30. 7.8CVE-2024-21469EPSS 0.1%

    Memory corruption when an invoke call and a TEE call are bound for the same trusted application.

  31. 5.5CVE-2024-5465EPSS 0.1%

    Function vulnerabilities in the Calendar module Impact: Successful exploitation of this vulnerability will affect availability.

  32. 8.8CVE-2023-42005EPSS 0.3%

    IBM Db2 on Cloud Pak for Data and Db2 Warehouse on Cloud Pak for Data 3.5, 4.0, 4.5, 4.6, 4.7, and 4.8 could allow a user with access to the Kubernetes pod, to make system calls compromising the security of containers. IBM X-Force ID: 2652…

  33. 5.8CVE-2024-20361EPSS 0.4%

    A vulnerability in the Object Groups for Access Control Lists (ACLs) feature of Cisco Firepower Management Center (FMC) Software could allow an unauthenticated, remote attacker to bypass configured access controls on managed devices that a…

  34. 5.5CVE-2024-32996EPSS 0.2%

    Privilege escalation vulnerability in the account module Impact: Successful exploitation of this vulnerability will affect availability.

  35. 5.5CVE-2023-52721EPSS 0.2%

    The WindowManager module has a vulnerability in permission control. Impact: Successful exploitation of this vulnerability may affect confidentiality.

  36. 7.8CVE-2024-22452EPSS 0.2%

    Dell Display and Peripheral Manager for macOS prior to 1.3 contains an improper access control vulnerability. A low privilege user could potentially exploit this vulnerability by modifying files in the installation folder to execute arbitr…

  37. 7.1CVE-2023-44281EPSS 0.2%

    Dell Pair Installer version prior to 1.2.1 contains an elevation of privilege vulnerability. A low privilege user with local access to the system could potentially exploit this vulnerability to delete arbitrary files and result in Denial o…

  38. 9.1CVE-2023-52106EPSS 0.3%

    Vulnerability of permission verification for APIs in the DownloadProviderMain module. Impact: Successful exploitation of this vulnerability will affect integrity and availability.

  39. 5.3CVE-2023-20190EPSS 0.7%

    A vulnerability in the classic access control list (ACL) compression feature of Cisco IOS XR Software could allow an unauthenticated, remote attacker to bypass the protection that is offered by a configured ACL on an affected device. Th…

  40. 7.5CVE-2023-39406EPSS 0.4%

    Permission control vulnerability in the XLayout component. Successful exploitation of this vulnerability may cause apps to forcibly restart.

  41. 7.5CVE-2023-39394EPSS 0.3%

    Vulnerability of API privilege escalation in the wifienhance module. Successful exploitation of this vulnerability may cause the arp list to be modified.

  42. 7.5CVE-2023-39391EPSS 0.4%

    Vulnerability of system file information leakage in the USB Service module. Successful exploitation of this vulnerability may affect confidentiality.

  43. 5.3CVE-2023-39387EPSS 0.3%

    Vulnerability of permission control in the window management module. Successful exploitation of this vulnerability may cause malicious pop-up windows.

  44. 7.5CVE-2023-39384EPSS 0.4%

    Vulnerability of incomplete permission verification in the input method module. Successful exploitation of this vulnerability may cause features to perform abnormally.

  45. 7.5CVE-2023-39380EPSS 0.4%

    Permission control vulnerability in the audio module. Successful exploitation of this vulnerability may cause audio devices to perform abnormally.

  46. 9.8CVE-2023-3599EPSS 0.7%

    A vulnerability was found in SourceCodester Best Fee Management System 1.0. It has been rated as critical. Affected by this issue is the function save_user of the file admin_class.php of the component Add User Handler. The manipulation lea…

  47. 7.5CVE-2022-48508EPSS 0.3%

    Inappropriate authorization vulnerability in the system apps. Successful exploitation of this vulnerability may affect service integrity.

  48. 7.8CVE-2023-21641EPSS 0.1%

    An app with non-privileged access can change global system brightness and cause undesired system behavior.

  49. 7.5CVE-2023-22633EPSS 0.7%

    An improper permissions, privileges, and access controls vulnerability [CWE-264] in FortiNAC-F 7.2.0, FortiNAC 9.4.1 and below, 9.2.6 and below, 9.1.8 and below, 8.8.0 all versions 8.7.0 all versions may allow an unauthenticated attacker t…

  50. 9.8CVE-2022-36246EPSS 0.7%

    Shop Beat Solutions (Pty) LTD Shop Beat Media Player 2.5.95 up to 3.2.57 is vulnerable to Insecure Permissions.