CWE-379 · File and Path Handling
Creation of Temporary File in Directory with Insecure Permissions
62CVEs
SortMost likely exploited
62 CVEs with CWE-379 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2020-11979As mitigation for CVE-2020-1945 Apache Ant 1.10.8 changed the permissions of temporary files it created so that only the current user was allowed to access them. Unfortunately the…Apache · Apache Ant · 2020-10-01 | – | 7.8% | 2020-10-01 |
| CVE-2023-26396Adobe Acrobat Reader DC for macOS installer (AcroRdrDC_2200220191_MUI.pkg) contains a local privilege escalation vulnerability.Adobe · Acrobat Reader · CVSS 7.8 · 2023-04-12 | 7.8 | 4.0% | 2023-04-12 |
| CVE-2024-36821Insecure permissions in Linksys Velop WiFi 5 (WHW01v1) 1.1.13.202617 allows attackers to escalate privileges from Guest to root.Linksys · Velop Whw0101 Firmware · CVSS 8.8 · 2024-06-11 | 8.8 | 2.9% | 2024-06-11 |
| CVE-2021-21100Adobe Digital Editions Arbitrary file system write vulnerabilityAdobe · Digital Editions · CVSS 7.8 · 2021-04-15 | 7.8 | 1.7% | 2021-04-15 |
| CVE-2021-40708Adobe Genuine Service Installer Privilege Escalation VulnerabilityAdobe · GoCart · CVSS 7.3 · 2021-09-29 | 7.3 | 1.7% | 2021-09-29 |
| CVE-2022-23950In Keylime before 6.3.0, Revocation Notifier uses a fixed /tmp path for UNIX domain socket which can allow unprivileged users a method to prohibit keylime operations.Keylime · keylime · CVSS 7.5 · 2022-09-21 | 7.5 | 1.7% | 2022-09-21 |
| CVE-2021-39828Adobe Digital Editions Installer flaw leads to Local Privilege EscalationAdobe · Digital Editions · CVSS 5.8 · 2021-09-27 | 5.8 | 1.5% | 2021-09-27 |
| CVE-2021-39827Adobe Digital Editions Installer flaw leads to Arbitrary File System WriteAdobe · Digital Editions · CVSS 6.5 · 2021-09-27 | 6.5 | 1.5% | 2021-09-27 |
| CVE-2016-9486On Windows endpoints, the SecureConnector agent is vulnerable to privilege escalation whereby an authenticated unprivileged user can obtain administrator privileges on the endpoin…Microsoft · Windows SecureConnector agent · 2018-07-13 | – | 1.3% | 2018-07-13 |
| CVE-2025-21173.NET Elevation of Privilege VulnerabilityMicrosoft · .NET 8.0 · CVSS 7.3 · 2025-01-14 | 7.3 | 1.3% | 2025-01-14 |
| CVE-2021-43017Adobe Creative Cloud DLL Hijacking Local Application Denial of ServiceAdobe · GoCart · CVSS 4.2 · 2021-11-18 | 4.2 | 1.2% | 2021-11-18 |
| CVE-2020-8831World writable root owned lock file created in user controllable locationCanonical · Apport · CVSS 6.5 · 2020-04-22 | 6.5 | 0.7% | 2020-04-22 |
| CVE-2021-21331DataDog API Client contains a Local Information Disclosure VulnerabilityDataDog · datadog-api-client-java · CVSS 3 · 2021-03-03 | 3.0 | 0.6% | 2021-03-03 |
| CVE-2021-21068Adobe Creative Cloud installer arbitrary file overwrite vulnerabilityAdobe · Creative Cloud (desktop component) · CVSS 6.1 · 2021-03-12 | 6.1 | 0.6% | 2021-03-12 |
| CVE-2022-3952ManyDesigns Portofino WarFileLauncher.java createTempDir temp fileManyDesigns · Portofino · CVSS 2.6 · 2022-11-11 | 2.6 | 0.6% | 2022-11-11 |
| CVE-2021-28568Adobe Genuine Services insecure file permission could lead to privilege escalationAdobe · GoCart · CVSS 5.8 · 2021-09-08 | 5.8 | 0.6% | 2021-09-08 |
| CVE-2021-40776Adobe Lightroom Classic DLL Hijacking Local Privilege Escalation VulnerabilityAdobe · Lightroom Classic · CVSS 6.1 · 2022-06-15 | 6.1 | 0.5% | 2022-06-15 |
| CVE-2021-29428Local privilege escalation through system temporary directorygradle · gradle · CVSS 8.8 · 2021-04-13 | 8.8 | 0.5% | 2021-04-13 |
| CVE-2021-36002Adobe Captivate Installer Creation of Temporary File In Directory With Incorrect Permissions Could Lead To Privilege EscalationAdobe · Captivate · CVSS 5 · 2021-09-01 | 5.0 | 0.5% | 2021-09-01 |
| CVE-2021-28633Adobe Creative Cloud Installer Arbitrary File WriteAdobe · Creative Cloud (desktop component) · CVSS 6.1 · 2021-08-24 | 6.1 | 0.5% | 2021-08-24 |
| CVE-2021-28613Adobe Creative Cloud Arbitrary File Overwrite VulnerabilityAdobe · Creative Cloud (desktop component) · CVSS 7.4 · 2021-09-27 | 7.4 | 0.5% | 2021-09-27 |
| CVE-2021-28623Adobe Premiere Elements Privilege Escalation VulnerabilityAdobe · Premiere · CVSS 6.2 · 2021-06-28 | 6.2 | 0.5% | 2021-06-28 |
| CVE-2021-28597Adobe Photoshop Elements Privilege Escalation Vulnerability - symbolic linkAdobe · Photoshop Elements · CVSS 6.2 · 2021-06-28 | 6.2 | 0.5% | 2021-06-28 |
| CVE-2026-69482Windows Error Reporting Tampering VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 7.1 · 2026-09-08 | 7.1 | 0.5% | 2026-09-08 |
| CVE-2013-1815Packstack: red hat openstack: packstack: unauthorized system modification via insecure answer file creationRed Hat · OpenStack Folsom for RHEL 6 · CVSS 6.1 · 2013-04-10 | 6.1 | 0.5% | 2013-04-10 |
| CVE-2026-120778Aspire Elevation of Privilege VulnerabilityMicrosoft · Aspire.Cli · CVSS 7.3 · 2026-11-10 | 7.3 | 0.4% | 2026-11-10 |
| CVE-2019-25677WinRAR 5.61 Denial of Service via Malformed Language FileWin-Rar · WinRAR · CVSS 6.2 · 2026-04-05 | 6.2 | 0.4% | 2026-04-05 |
| CVE-2021-21363Generator Web Application: Local Privilege Escalation Vulnerability via System Temp Directoryswagger-api · swagger-codegen · CVSS 5.3 · 2021-03-11 | 5.3 | 0.4% | 2021-03-11 |
| CVE-2023-21611Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalationAdobe · Acrobat Reader · CVSS 7.8 · 2023-01-18 | 7.8 | 0.4% | 2023-01-18 |
| CVE-2026-12555HP Easy Start for macOS - Security UpdateHP Inc · HP Easy Start for macOS · CVSS 7.7 · 2026-08-24 | 7.7 | 0.4% | 2026-08-24 |
| CVE-2023-21612Adobe Acrobat Reader Creation of Temporary File in Directory with Incorrect Permissions Privilege escalationAdobe · Acrobat Reader · CVSS 7.8 · 2023-01-18 | 7.8 | 0.4% | 2023-01-18 |
| CVE-2023-49797Local Privilege Escalation in pyinstaller on Windowspyinstaller · pyinstaller · CVSS 8.8 · 2023-12-09 | 8.8 | 0.3% | 2023-12-09 |
| CVE-2025-21162Photoshop Elements | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)Adobe · Photoshop Elements · CVSS 5.5 · 2025-02-11 | 5.5 | 0.3% | 2025-02-11 |
| CVE-2024-9950Abuse of Unauthenticated Compliance Recheck in SecureConnectorForescout · SecureConnector · CVSS 8.5 · 2025-01-02 | 8.5 | 0.3% | 2025-01-02 |
| CVE-2023-3972Insights-client: unsafe handling of temporary files and directoriesRed Hat · Red Hat Enterprise Linux 7 · CVSS 7.8 · 2023-11-01 | 7.8 | 0.3% | 2023-11-01 |
| CVE-2025-10279Privilege Escalation in mlflow/mlflowmlflow · mlflow/mlflow · CVSS 7 · 2026-02-02 | 7.0 | 0.2% | 2026-02-02 |
| CVE-2021-31411Insecure temporary directory usage in frontend build functionality of Vaadin 14 and 15-19Vaadin · Vaadin · CVSS 6.3 · 2021-05-05 | 6.3 | 0.2% | 2021-05-05 |
| CVE-2025-33111IBM Controller Information DisclosureIBM · Controller · CVSS 4.3 · 2025-12-08 | 4.3 | 0.2% | 2025-12-08 |
| CVE-2023-6080Privilege Escalation to SYSTEM in Lakeside Software InstallerLakeside Software · SysTrack LsiAgent Installer · CVSS 7.8 · 2024-10-18 | 7.8 | 0.2% | 2024-10-18 |
| CVE-2023-40438An issue was addressed with improved handling of temporary files. This issue is fixed in macOS Sonoma 14, iOS 16.7 and iPadOS 16.7. An app may be able to access edited photos save…Apple · iOS and iPadOS · CVSS 5.5 · 2024-01-10 | 5.5 | 0.2% | 2024-01-10 |
| CVE-2022-23163Dell PowerScale OneFS, 8.2,x, 9.1.0.x, 9.2.1.x, and 9.3.0.x contain a denial of service vulnerability. A local malicious user could potentially exploit this vulnerability, leading…Dell · PowerScale OneFS · CVSS 4.7 · 2022-04-12 | 4.7 | 0.2% | 2022-04-12 |
| CVE-2023-32450Dell Power Manager, Versions 3.3 to 3.14 contains an Improper Access Control vulnerability. A low-privileged malicious user may potentially exploit this vulnerability to perform a…Dell · Dell Power Manager (DPM) · CVSS 6.1 · 2023-07-27 | 6.1 | 0.2% | 2023-07-27 |
| CVE-2025-64896Creative Cloud Desktop | Creation of Temporary File in Directory with Incorrect Permissions (CWE-379)Adobe · Creative Cloud Desktop · CVSS 5.5 · 2025-12-09 | 5.5 | 0.2% | 2025-12-09 |
| CVE-2023-37243The C:\Windows\Temp\Agent.Package.Availability\Agent.Package.Availability.exe file is automatically launched as SYSTEM when the system reboots. Since the C:\Windows\Temp\Agent.Pac…Atera · Atera Agent Package Availability · CVSS 7.8 · 2023-10-31 | 7.8 | 0.2% | 2023-10-31 |
| CVE-2024-9500Autodesk ADP Desktop SDK Privilege Escalation VulnerabilityAutodesk · Installer · CVSS 7.8 · 2024-11-15 | 7.8 | 0.2% | 2024-11-15 |
| CVE-2024-24693Zoom Rooms Client for Windows - Improper Access ControlZoom Video Communications, Inc. · Zoom Rooms Client for Windows · CVSS 7.2 · 2024-03-13 | 7.2 | 0.2% | 2024-03-13 |
| CVE-2023-3181Insecure Permissions in Splashtop Software UpdaterSplashtop · Splashtop Software Updater · CVSS 7.8 · 2024-01-25 | 7.8 | 0.2% | 2024-01-25 |
| CVE-2026-85028Creation of Temporary File in Directory with Insecure Permissions in AWS FPGA Development KitAWS · aws-fpga · CVSS 7.8 · 2026-09-03 | 7.8 | 0.2% | 2026-09-03 |
| CVE-2026-54328Pi: Predictable temporary extension install paths allow local privilege escalation on shared Linux hostsearendil-works · pi · CVSS 7.3 · 2026-06-23 | 7.3 | 0.2% | 2026-06-23 |
| CVE-2024-7562A potential elevated privilege issue has been reported with InstallShield built Standalone MSI setups having multiple InstallScript custom actions configured. All supported versio…Revenera · InstallShield · CVSS 7.3 · 2025-06-12 | 7.3 | 0.2% | 2025-06-12 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.