cve.bz

CWE-693: Protection Mechanism Failure, page 14

Filter

The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.

What the weakness is: CWE-693 at MITRE

Ask an AI about CWE-693

ChatGPTClaudePerplexityGoogle AI Mode

Show the promptExplain CWE-693: Protection Mechanism Failure and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/693.html and https://cve.bz/cve/cwe/693?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2025-31244EPSS 0.2%

    A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.5. An app may be able to break out of its sandbox.

  2. 7.8CVE-2025-31224EPSS 0.2%

    A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS Ventura 13.7.6. An app may be able to bypass certain Privacy preferences.

  3. 2.1CVE-2025-46553EPSS 0.3%

    @misskey-dev/summaly is a tool for getting a summary of a web page. Starting in version 3.0.1 and prior to version 5.2.1, a logic error in the main `summaly` function causes the `allowRedirects` option to never be passed to any plugins, an…

  4. 9.4CVE-2025-3114EPSS 0.6%

    Code Execution via Malicious Files: Attackers can create specially crafted files with embedded code that may execute without adequate security validation, potentially leading to system compromise. Sandbox Bypass Vulnerability: A flaw in t…

  5. 5.4CVE-2025-27472EPSS 1.5%

    Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature over a network.

  6. 6.8CVE-2025-26637EPSS 0.9%

    Protection mechanism failure in Windows BitLocker allows an unauthorized attacker to bypass a security feature with a physical attack.

  7. 8.8CVE-2025-21384EPSS 0.7%

    An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a network.

  8. 7.8CVE-2025-24061EPSS 1.2%

    Protection mechanism failure in Windows Mark of the Web (MOTW) allows an unauthorized attacker to bypass a security feature locally.

  9. 8.4CVE-2024-56182EPSS 0.2%

    A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC Field PG M6 (All versions < V26.01.12), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (Al…

  10. 8.4CVE-2024-56181EPSS 0.2%

    A vulnerability has been identified in SIMATIC Field PG M5 (All versions), SIMATIC IPC BX-21A (All versions < V31.01.07), SIMATIC IPC BX-32A (All versions < V29.01.07), SIMATIC IPC BX-39A (All versions < V29.01.07), SIMATIC IPC BX-59A (All…

  11. 9.8CVE-2025-27665EPSS 0.7%

    Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can have known malicious code OVE-20230524-0009.

  12. 5.3CVE-2024-13794EPSS 0.5%

    The WP Ghost (Hide My WP Ghost) – Security & Firewall plugin for WordPress is vulnerable to Login Page Dislcosure in all versions up to, and including, 5.3.02. This is due to the plugin not properly restricting the /wp-register.php path. T…

  13. 7.0CVE-2025-0411KEVEPSS 48%

    7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in tha…

  14. 1.8CVE-2025-0575EPSS 0.2%

    A vulnerability has been found in Union Bank of India Vyom 8.0.34 on Android and classified as problematic. This vulnerability affects unknown code of the component Rooting Detection. The manipulation leads to protection mechanism failure.…

  15. 7.8CVE-2025-21346EPSS 0.7%

    Microsoft Office Security Feature Bypass Vulnerability

  16. 7.5CVE-2025-21276EPSS 2.5%

    Windows MapUrlToZone Denial of Service Vulnerability

  17. 6.5CVE-2025-21217EPSS 2.0%

    Windows NTLM Spoofing Vulnerability

  18. 6.8CVE-2025-21211EPSS 0.8%

    Secure Boot Security Feature Bypass Vulnerability

  19. 6.5CVE-2024-11734EPSS 0.9%

    A denial of service vulnerability was found in Keycloak that could allow an administrative user with the right to change realm settings to disrupt the service. This action is done by modifying any of the security headers and inserting newl…

  20. 5.4CVE-2024-56326EPSS 0.5%

    Jinja is an extensible templating engine. Prior to 3.1.5, An oversight in how the Jinja sandboxed environment detects calls to str.format allows an attacker that controls the content of a template to execute arbitrary Python code. To explo…

  21. 7.8CVE-2024-8811EPSS 0.4%

    WinZip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of WinZip. User interaction is required to exploit this vulnerability in t…

  22. 4.2CVE-2024-11197EPSS 0.4%

    The Lock User Account plugin for WordPress is vulnerable to user lock bypass in all versions up to, and including, 1.0.5. This is due to permitting application password logins when user accounts are locked. This makes it possible for authe…

  23. 5.8CVE-2021-1494EPSS 1.1%

    Multiple Cisco products are affected by a vulnerability in the Snort detection engine that could allow an unauthenticated, remote attacker to bypass a configured file policy for HTTP. The vulnerability is due to incorrect handling of spe…

  24. 2.0CVE-2024-38660EPSS 0.2%

    Protection mechanism failure in the SPP for some Intel(R) Xeon(R) processor family (E-Core) may allow an authenticated user to potentially enable escalation of privilege via local access.

  25. 7.3CVE-2024-36242EPSS 0.2%

    Protection mechanism failure in the SPP for some Intel(R) Processors may allow an authenticated user to potentially enable escalation of privilege via local access.

  26. 7.8CVE-2024-43645EPSS 0.5%

    Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

  27. 5.5CVE-2024-38203EPSS 0.7%

    Windows Package Library Manager Information Disclosure Vulnerability

  28. 1.0CVE-2024-51481EPSS 0.2%

    Nix is a package manager for Linux and other Unix systems. On macOS, built-in builders (such as `builtin:fetchurl`, exposed to users with `import <nix/fetchurl.nix>`) were not executed in the macOS sandbox. Thus, these builders (which are …

  29. 8.8CVE-2024-44122EPSS 0.3%

    A logic issue was addressed with improved checks. This issue is fixed in iOS 18 and iPadOS 18, macOS Sequoia 15, macOS Sonoma 14.7.1, macOS Ventura 13.7.1. An application may be able to break out of its sandbox.

  30. 5.5CVE-2024-43585EPSS 0.5%

    Code Integrity Guard Security Feature Bypass Vulnerability

  31. 8.4CVE-2024-43584EPSS 0.5%

    Windows Scripting Engine Security Feature Bypass Vulnerability

  32. 6.4CVE-2024-43513EPSS 0.6%

    BitLocker Security Feature Bypass Vulnerability

  33. 5.4CVE-2024-20438EPSS 0.4%

    A vulnerability in the REST API endpoints of Cisco NDFC could allow an authenticated, low-privileged, remote attacker to read or write files on an affected device. This vulnerability exists because of missing authorization controls on s…

  34. 5.4CVE-2024-46976EPSS 0.3%

    Backstage is an open framework for building developer portals. An attacker with control of the contents of the TechDocs storage buckets is able to inject executable scripts in the TechDocs content that will be executed in the victim's brow…

  35. 6.5CVE-2024-45835EPSS 0.2%

    Mattermost Desktop App versions <=5.8.0 fail to sufficiently configure Electron Fuses which allows an attacker to gather Chromium cookies or abuse other misconfigurations via remote/local access.

  36. 6.5CVE-2024-45833EPSS 0.3%

    Mattermost Mobile Apps versions <=2.18.0 fail to disable autocomplete during login while typing the password and visible password is selected, which allows the password to get saved in the dictionary when the user has Swiftkey as the defau…

  37. 6.5CVE-2024-43487EPSS 1.2%

    Windows Mark of the Web Security Feature Bypass Vulnerability

  38. 7.3CVE-2024-38226KEVEPSS 2.7%

    Microsoft Publisher Security Feature Bypass Vulnerability

  39. 5.4CVE-2024-38217KEVEPSS 10%

    Windows Mark of the Web Security Feature Bypass Vulnerability

  40. 8.6CVE-2024-45411EPSS 0.8%

    Twig is a template language for PHP. Under some circumstances, the sandbox security checks are not run which allows user-contributed templates to bypass the sandbox restrictions. This vulnerability is fixed in 1.44.8, 2.16.1, and 3.14.0.

  41. 5.3CVE-2022-4100EPSS 0.3%

    The WP Cerber Security plugin for WordPress is vulnerable to IP Protection bypass in versions up to, and including 9.4 due to the plugin improperly checking for a visitor's IP address. This makes it possible for an attacker whose IP addres…

  42. 8.8CVE-2024-20286EPSS 0.2%

    A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. T…

  43. 8.8CVE-2024-20284EPSS 0.2%

    A vulnerability in the Python interpreter of Cisco NX-OS Software could allow an authenticated, low-privileged, local attacker to escape the Python sandbox and gain unauthorized access to the underlying operating system of the device. T…

  44. 6.5CVE-2024-39836EPSS 0.3%

    Mattermost versions 9.9.x <= 9.9.1, 9.5.x <= 9.5.7, 9.10.x <= 9.10.0 and 9.8.x <= 9.8.2 fail to ensure that remote/synthetic users cannot create sessions or reset passwords, which allows the munged email addresses, created by shared chann…

  45. 7.0CVE-2024-24983EPSS 0.4%

    Protection mechanism failure in firmware for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 4.4 may allow an unauthenticated user to potentially enable denial of service via network access.

  46. 6.9CVE-2024-24980EPSS 0.2%

    Protection mechanism failure in some 3rd, 4th, and 5th Generation Intel(R) Xeon(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.

  47. 7.0CVE-2024-23499EPSS 0.5%

    Protection mechanism failure in Linux kernel mode driver for some Intel(R) Ethernet Network Controllers and Adapters E810 Series before version 28.3 may allow an unauthenticated user to potentially enable denial of service via network acce…

  48. 6.5CVE-2024-38213KEVEPSS 14%

    Windows Mark of the Web Security Feature Bypass Vulnerability

  49. 8.8CVE-2024-38180EPSS 1.6%

    Windows SmartScreen Security Feature Bypass Vulnerability

  50. 7.5CVE-2024-0101EPSS 0.5%

    NVIDIA Mellanox OS, ONYX, Skyway, MetroX-2 and MetroX-3 XC contain a vulnerability in ipfilter, where improper ipfilter definitions could enable an attacker to cause a failure by attacking the switch. A successful exploit of this vulnerabi…