CWE-379 · weakness in File and Path Handling
Creation of Temporary File in Directory with Insecure Permissions
62 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 62 is a mark on the map. Named now: 1 to 26, most at risk first.
- As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the…
- Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.
- Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.
- Adobe Digital Editions Arbitrary file system write vulnerability
- Adobe Genuine Service Installer Privilege Escalation Vulnerability
- In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit keylime operations.
- Adobe Digital Editions Installer flaw leads to Local Privilege Escalation
- Adobe Digital Editions Installer flaw leads to Arbitrary File System Write
- On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoin…
- .NET Elevation of Privilege Vulnerability
- Adobe Creative Cloud DLL Hijacking Local Application Denial of Service
- World writable root owned lock file created in user controllable location
- DataDog API Client contains a Local Information Disclosure Vulnerability
- Adobe Creative Cloud installer arbitrary file overwrite vulnerability
- ManyDesigns Portofino WarFileLauncher.java createTempDir temp file
- Adobe Genuine Services insecure file permission could lead to privilege escalation
- Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation Vulnerability
- Local privilege escalation through system temporary directory
- Adobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege Escalation
- Adobe Creative Cloud Installer Arbitrary File Write
- Adobe Creative Cloud Arbitrary File Overwrite Vulnerability
- Adobe Premiere Elements Privilege Escalation Vulnerability
- Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic link
- Windows Error Reporting Tampering Vulnerability
- Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creation
- Aspire Elevation of Privilege Vulnerability
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.