Skip to content
BackEsc
Sign in

CWE-281 · weakness in Access Control

Improper Preservation of Permissions

327 CVEs · 1 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
1
check available
1
likely to be exploited
2

Every one of the 327 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Microsoft Windows XP SP3, Windows XP x64 XP2, Windows Server 2003 SP2, Windows Vista, Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8, Windows 8.1 and Windows RT 8.1,…CVE-2017-8543Microsoft Corporation · CVSS 9.8 · 74% likely

    Microsoft

  2. FXServer < v9601 - Information ExposureCVE-2024-46310CVSS 9.1 · 2.6% likely
  3. An access permission override in Apache Struts 2.0.0 to 2.5.20 may cause a Denial of Service when performing a file upload.CVE-2019-0233Apache · 66% likely

    Apache

  4. Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016…CVE-2017-8589Microsoft Corporation · 26% likely

    Microsoft

  5. Microsoft Windows 7 SP1, Windows Server 2008 SP2 and R2 SP1, Windows 8.1 and Windows RT 8.1, Windows Server 2012 and R2, Windows 10 Gold, 1511, 1607, 1703, and Windows Server 2016…CVE-2017-8563Microsoft Corporation · 7.2% likely

    Microsoft

  6. Win32k in Microsoft Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, Windows 10 Gold, 1511, 1607, and 1703, and Win…CVE-2017-8578Microsoft Corporation · 6.5% likely

    Microsoft

  7. An incorrect permission preservation vulnerability in Trend Micro Apex One, Apex One as a Service and OfficeScan XG SP1 could allow a remote user to perform an attack and bypass a…CVE-2021-32465Trend Micro · 4.3% likely

    Trend Micro

  8. A privilege escalation flaw was found in Podman. This flaw allows an attacker to publish a malicious image to a public registry. Once this image is downloaded by a potential victi…CVE-2022-1227Podman Project · 4.2% likely

    Podman Project

  9. Using "**" as a pattern in Spring Security configuration for WebFlux creates a mismatch in pattern matching between Spring Security and Spring WebFlux, and the potential for a sec…CVE-2023-34034Vmware · CVSS 9.1 · 4.1% likely

    VMware

  10. Macintosh clients, when using NT file system volumes on Windows 2000 SP1, create subdirectories and automatically modify the inherited NTFS permissions, which may cause the direct…CVE-2001-1515Microsoft · 4.0% likely

    Microsoft

  11. The (1) Kate and (2) Kwrite applications in KDE KDE 3.2.x through 3.4.0 do not properly set the same permissions on the backup file as were set on the original file, which could a…CVE-2005-1920Kde · 3.7% likely

    Kde

  12. Local arbitrary code execution in splitinstall in Android's Play CoreCVE-2020-8913Google LLC · CVSS 8.8 · 2.9% likely

    Google

  13. Insufficiently restricted permissions on data directory in Docker EngineCVE-2021-41091moby · CVSS 6.3 · 2.8% likely

    Moby

  14. Windows Security Feature Bypass VulnerabilityCVE-2020-16910Microsoft · CVSS 6.2 · 2.8% likely

    Microsoft

  15. Microsoft Windows 8.1 and Windows RT 8.1, Windows Server 2012 R2, Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow an attacker to run processes in an elevated…CVE-2017-8465Microsoft Corporation · 2.3% likely

    Microsoft

  16. ProcessMaker before v3.5.4 was discovered to contain insecure permissions in the user profile page. This vulnerability allows attackers to escalate normal users to Administrators.CVE-2022-38577Processmaker · CVSS 8.8 · 2.3% likely

    Processmaker

  17. An issue was discovered in certain Apple products. iOS before 11.3 is affected. macOS before 10.13.4 is affected. tvOS before 11.3 is affected. watchOS before 4.3 is affected. The…CVE-2018-4115Apple · 2.2% likely

    Apple

  18. If a malicious attacker has used another vulnerability to gain full control over a content process, they may be able to replace the alternate data resources stored in the JavaScri…CVE-2018-5163Mozilla · 2.0% likely

    Mozilla

  19. Plesk CMS 18.0.37 is affected by an insecure permissions vulnerability that allows privilege Escalation from user to admin rights. OTE: the vendor states that this is only a site-…CVE-2021-45008Plesk · CVSS 8.8 · 2.0% likely

    Plesk

  20. Improper preservation of permissions in Nagios XI 5.7.4 allows a local, low-privileged, authenticated user to weaken the permissions of files, resulting in low-privileged users be…CVE-2020-5796Nagios · 2.0% likely

    Nagios

  21. Microsoft Windows 10 Gold, 1511, 1607, and 1703, and Windows Server 2016 allow a locally-authenticated attacker to run a specially crafted application on a targeted system when Wi…CVE-2017-8494Microsoft Corporation · 1.9% likely

    Microsoft

  22. MetaMask before 10.11.3 might allow an attacker to access a user's secret recovery phrase because an input field is used for a BIP39 mnemonic, and Firefox and Chromium save such f…CVE-2022-32969Metamask · 1.8% likely
  23. Improper Preservation of Permissions in containerdCVE-2021-43816containerd · CVSS 8 · 1.8% likely

    Containerd

  24. Blink in Google Chrome prior to 57.0.2987.98 for Mac, Windows, and Linux and 57.0.2987.108 for Android failed to correctly propagate CSP restrictions to local scheme pages, which…CVE-2017-5033Google · 1.7% likely

    Google

  25. A vulnerability was discovered in GitLab versions before 13.1.10, 13.2.8 and 13.3.4. A user without 2 factor authentication enabled could be prohibited from accessing GitLab by be…CVE-2020-13308GitLab · CVSS 2.7 · 1.6% likely

    GitLab

  26. Files added to tar with Phar::buildFromIterator have all-access permissionsCVE-2020-7063PHP Group · CVSS 5.5 · 1.6% likely

    PHP

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP

CyberSIXTSignal over noise
Updated AboutDevelopersSign in