cve.bz

CWE-276: Incorrect Default Permissions, page 3

Filter

During installation, installed file permissions are set to allow anyone to modify those files.

What the weakness is: CWE-276 at MITRE

Ask an AI about CWE-276

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-276: Incorrect Default Permissions and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/276.html and https://cve.bz/cve/cwe/276?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.4CVE-2026-30811EPSS 0.3%

    Missing Authorization vulnerability allows Exposure of Sensitive Information via configuration endpoint. This issue affects Pandora FMS: from 777 through 800

  2. 6.9CVE-2026-21013EPSS 0.09%

    Incorrect default permission in Galaxy Wearable prior to version 2.2.68.26 allows local attackers to access sensitive information.

  3. 7.8CVE-2026-25203EPSS 0.2%

    Samsung MagicINFO 9 Server Incorrect Default Permissions Local Privilege Escalation Vulnerability This issue affects MagicINFO 9 Server: less than 21.1091.1.

  4. 6.4CVE-2025-58713EPSS 0.1%

    A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an att…

  5. 6.4CVE-2025-57854EPSS 0.1%

    A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attack…

  6. 6.4CVE-2025-57853EPSS 0.2%

    A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute …

  7. 6.7CVE-2025-57851EPSS 0.1%

    A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an att…

  8. 6.4CVE-2025-57847EPSS 0.2%

    A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permissions during the build process. In certain conditions, an at…

  9. 5.6CVE-2025-7024EPSS 0.1%

    Incorrect Default Permissions vulnerability in AIRBUS PSS TETRA Connectivity Server on Windows Server OS allows Privilege Abuse. An attacker may execute arbitrary code with SYSTEM privileges if a user is tricked or directed to place a cr…

  10. 7.8CVE-2026-21765EPSS 0.1%

    HCL BigFix Platform is affected by insecure permissions on private cryptographic keys.  The private cryptographic keys located on a Windows host machine might be subject to overly permissive file system permissions.

  11. 4.8CVE-2026-34450EPSS 0.1%

    The Claude SDK for Python provides access to the Claude API from Python applications. From version 0.86.0 to before version 0.87.0, the local filesystem memory tool in the Anthropic Python SDK created memory files with mode 0o666, leaving …

  12. 6.9CVE-2025-15615EPSS 0.5%

    Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending exces…

  13. 6.9CVE-2026-32983EPSS 0.4%

    Wazuh Manager authd service in wazuh-manager packages through version 4.7.3 contains an improper restriction of client-initiated SSL/TLS renegotiation vulnerability that allows remote attackers to cause a denial of service by sending exces…

  14. 5.3CVE-2026-0748EPSS 0.4%

    In the Drupal 7 Internationalization (i18n) module, the i18n_node submodule allows a user with both "Translate content" and "Administer content translations" permissions to view and attach unpublished nodes via the translation UI and its a…

  15. 8.5CVE-2026-32680EPSS 0.1%

    The installer of RATOC RAID Monitoring Manager for Windows allows to customize the installation folder. If the installation folder is customized to some non-default one, the folder may be left with un-secure ACLs and non-administrative use…

  16. 8.2CVE-2026-24063EPSS 0.1%

    When a plugin is installed using the Arturia Software Center (MacOS), it also installs an uninstall.sh bash script in a root owned path. This script is written to disk with the file permissions 777, meaning it is writable by any user. When…

  17. 6.9CVE-2016-20029EPSS 0.2%

    ZKTeco ZKBioSecurity 3.0 contains a file path manipulation vulnerability that allows attackers to access arbitrary files by modifying file paths used to retrieve local resources. Attackers can manipulate path parameters to bypass access co…

  18. 6.4CVE-2025-8766EPSS 0.2%

    A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attack…

  19. 6.4CVE-2025-57849EPSS 0.2%

    A container privilege escalation flaw was found in certain Fuse images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands…

  20. 5.8CVE-2026-3315EPSS 0.1%

    Incorrect Default Permissions, : Execution with Unnecessary Privileges, : Incorrect Permission Assignment for Critical Resource vulnerability in ASSA ABLOY Visionline on Windows allows Configuration/Environment Manipulation.This issue affe…

  21. 7.8CVE-2026-26131EPSS 0.4%

    Incorrect default permissions in .NET allows an authorized attacker to elevate privileges locally.

  22. 6.8CVE-2026-28267EPSS 0.1%

    Multiple i-フィルター products are configured with improper file access permission settings. Files may be created or overwritten in the system directory or backup directory by a non-administrative user.

  23. 7.8CVE-2026-28727EPSS 0.1%

    Local privilege escalation due to insecure Unix socket permissions. The following products are affected: Acronis Cyber Protect 17 (macOS) before build 41186, Acronis Cyber Protect Cloud Agent (macOS) before build 41124, Acronis True Image …

  24. 5.0CVE-2026-28717EPSS 0.1%

    Local privilege escalation due to improper directory permissions. The following products are affected: Acronis Cyber Protect 17 (Windows) before build 41186.

  25. 8.5CVE-2026-26034EPSS 0.2%

    UPS Multi-UPS Management Console (MUMC) version 01.06.0001 (A03) contains an Incorrect Default Permissions (CWE-276) vulnerability that allows an attacker to execute arbitrary code with SYSTEM privileges by causing the application to load …

  26. 6.7CVE-2026-21423EPSS 0.2%

    Dell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1, contains an incorrect default permissions vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, l…

  27. 5.2CVE-2026-2915EPSS 0.1%

    HP System Event Utility might allow denial of service with elevated arbitrary file writes. This potential vulnerability was remediated with HP System Event Utility version 3.2.16.

  28. 5.4CVE-2026-27653EPSS 0.1%

    The installers for multiple products provided by Soliton Systems K.K. contain an issue with incorrect default permissions, which may allow arbitrary code to be executed with SYSTEM privileges.

  29. 8.5CVE-2026-23703EPSS 0.1%

    The installer of FinalCode Client provided by Digital Arts Inc. contains an incorrect default permissions vulnerability. A non-administrative user may execute arbitrary code with SYSTEM privilege.

  30. 5.8CVE-2025-1789EPSS 0.1%

    Local privilege escalation in Genetec Update Service. An authenticated, low-privileged, Windows user could exploit this vulnerability to gain elevated privileges on the affected system.

  31. 5.4CVE-2026-2026EPSS 0.1%

    A vulnerability has been identified where weak file permissions in the Nessus Agent directory on Windows hosts could allow unauthorized access, potentially permitting Denial of Service (DoS) attacks.

  32. 5.4CVE-2025-36522EPSS 0.10%

    Incorrect default permissions for some Intel(R) Chipset Software before version 10.1.20266.8668 or later. within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined …

  33. 5.4CVE-2025-36511EPSS 0.1%

    Incorrect default permissions for some Intel(R) Memory and Storage Tool before version 2.5.2 within Ring 3: User Applications may allow an escalation of privilege. System software adversary with an authenticated user combined with a high c…

  34. 5.4CVE-2025-32453EPSS 0.1%

    Incorrect default permissions for some Intel(R) Graphics Driver software within Ring 2: Privileged Process may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity att…

  35. 5.4CVE-2025-31655EPSS 0.10%

    Incorrect default permissions for some Intel(R) Battery Life Diagnostic Tool within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity …

  36. 5.4CVE-2025-22849EPSS 0.1%

    Incorrect default permissions for the Intel(R) Optane(TM) PMem management software before versions CR_MGMT_01.00.00.3584, CR_MGMT_02.00.00.4052, CR_MGMT_03.00.00.0538 within Ring 3: User Applications may allow an escalation of privilege. U…

  37. 7.8CVE-2026-25931EPSS 0.1%

    vscode-spell-checker is a basic spell checker that works well with code and documents. Prior to v4.5.4, DocumentSettings._determineIsTrusted treats the configuration value cSpell.trustedWorkspace as the authoritative trust flag. The value …

  38. 8.5CVE-2020-37160EPSS 0.2%

    SprintWork 2.3.1 contains multiple local privilege escalation vulnerabilities through insecure file, service, and folder permissions on Windows systems. Local unprivileged users can exploit missing executable files and weak service configu…

  39. 6.5CVE-2025-15343EPSS 0.3%

    Tanium addressed an incorrect default permissions vulnerability in Enforce.

  40. 6.5CVE-2025-15341EPSS 0.3%

    Tanium addressed an incorrect default permissions vulnerability in Benchmark.

  41. 6.5CVE-2025-15340EPSS 0.3%

    Tanium addressed an incorrect default permissions vulnerability in Comply.

  42. 6.5CVE-2025-15339EPSS 0.3%

    Tanium addressed an incorrect default permissions vulnerability in Discover.

  43. 6.5CVE-2025-15338EPSS 0.3%

    Tanium addressed an incorrect default permissions vulnerability in Partner Integration.

  44. 6.5CVE-2025-15337EPSS 0.3%

    Tanium addressed an incorrect default permissions vulnerability in Patch.

  45. 6.5CVE-2025-15336EPSS 0.3%

    Tanium addressed an incorrect default permissions vulnerability in Performance.

  46. 4.3CVE-2025-15335EPSS 0.3%

    Tanium addressed an information disclosure vulnerability in Threat Response.

  47. 4.3CVE-2025-15334EPSS 0.3%

    Tanium addressed an information disclosure vulnerability in Threat Response.

  48. 4.3CVE-2025-15333EPSS 0.2%

    Tanium addressed an information disclosure vulnerability in Threat Response.

  49. 8.5CVE-2020-37129EPSS 0.4%

    Memu Play 7.1.3 contains an insecure folder permissions vulnerability that allows low-privileged users to modify the MemuService.exe executable. Attackers can replace the service executable with a malicious file during system restart to ga…

  50. 8.8CVE-2025-10314EPSS 0.2%

    Incorrect Default Permissions vulnerability in Mitsubishi Electric Corporation FREQSHIP-mini for Windows versions 8.0.0 to 8.0.2 allows a local attacker to execute arbitrary code with system privileges by replacing service executable files…