CWE-657 · Misconfiguration and Insecure Design
Violation of Secure Design Principles
21CVEs
0exploited
0with a public check
0likely (EPSS 10%+)
SortMost likely exploited
21 CVEs with CWE-657 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-29320ZDI-CAN-20712: Adobe Acrobat Blacklist Bypass Design flawAdobe · Acrobat Reader · CVSS 7.8 · 2023-08-10 | 7.8 | 6.0% | 2023-08-10 |
| CVE-2022-28244Adobe Acrobat Reader DC CSP Bypass Leads To Privilege EscalationAdobe · Acrobat Reader · CVSS 6.3 · 2022-05-11 | 6.3 | 3.7% | 2022-05-11 |
| CVE-2021-44714Adobe Acrobat Reader Missing Custom Protocols in Warning Message PromptsAdobe · Acrobat Reader · CVSS 2.5 · 2022-01-14 | 2.5 | 2.5% | 2022-01-14 |
| CVE-2021-28583Magento Commerce insecure storage of sensitive documentationAdobe · Magento Commerce · CVSS 7.5 · 2021-06-28 | 7.5 | 1.9% | 2021-06-28 |
| CVE-2017-6032A Violation of Secure Design Principles issue was discovered in Schneider Electric Modicon Modbus Protocol. The Modicon Modbus protocol has a session-related weakness making it su…Schneider-Electric · Schneider Electric Modicon Modbus Protocol · 2017-06-30 | – | 1.7% | 2017-06-30 |
| CVE-2021-36061Adobe Connect Violation of Secure Design Principles Vulnerability Can Lead To Editing Or Deleting RecordingsAdobe · Connect · CVSS 5.4 · 2021-09-01 | 5.4 | 1.6% | 2021-09-01 |
| CVE-2019-15611Violation of Secure Design Principles in the iOS App 2.23.0 causes the app to leak its login and token to other Nextcloud services when search e.g. for federated users or register…Nextcloud · Nextcloud iOS · 2020-02-04 | – | 1.1% | 2020-02-04 |
| CVE-2026-48399Adobe Campaign Classic (ACC) | Violation of Secure Design Principles (CWE-657)Adobe · Adobe Campaign Classic · CVSS 7.5 · 2026-08-03 | 7.5 | 0.9% | 2026-08-03 |
| CVE-2022-30683AEM Violation of Secure Design Principles Security feature bypassAdobe · Experience Manager · CVSS 5.3 · 2022-09-16 | 5.3 | 0.8% | 2022-09-16 |
| CVE-2020-8133A wrong generation of the passphrase for the encrypted block in Nextcloud Server 19.0.1 allowed an attacker to overwrite blocks in a file.Nextcloud · Nextcloud Server · 2020-11-09 | – | 0.7% | 2020-11-09 |
| CVE-2026-39888PraisonAIAgents has a sandbox escape via exception frame traversal in `execute_code` (subprocess mode)MervinPraison · praisonaiagents · CVSS 10 · 2026-04-08 | 10.0 | 0.5% | 2026-04-08 |
| CVE-2024-26139OpenCTI Authenticated Privilege EscalationOpenCTI-Platform · opencti · CVSS 8.3 · 2024-05-23 | 8.3 | 0.4% | 2024-05-23 |
| CVE-2019-0061Junos OS: Insecure management daemon (MGD) configuration may allow local privilege escalationJuniper Networks · Junos OS · CVSS 7.8 · 2019-10-09 | 7.8 | 0.4% | 2019-10-09 |
| CVE-2023-52714Vulnerability of defects introduced in the design process in the hwnff module. Impact: Successful exploitation of this vulnerability may affect service confidentiality.Huawei · HarmonyOS · CVSS 7.5 · 2024-04-07 | 7.5 | 0.3% | 2024-04-07 |
| CVE-2024-57957Vulnerability of improper log information control in the UI framework module Impact: Successful exploitation of this vulnerability may affect service confidentiality.Huawei · HarmonyOS · CVSS 6.6 · 2025-02-06 | 6.6 | 0.3% | 2025-02-06 |
| CVE-2026-113563Audition | Violation of Secure Design Principles (CWE-657)Adobe · Audition · CVSS 8.6 · 2026-11-10 | 8.6 | 0.3% | 2026-11-10 |
| CVE-2026-113526After Effects | Violation of Secure Design Principles (CWE-657)Adobe · After Effects · CVSS 8.6 · 2026-11-10 | 8.6 | 0.3% | 2026-11-10 |
| CVE-2026-113551Audition | Violation of Secure Design Principles (CWE-657)Adobe · Audition · CVSS 8.7 · 2026-11-10 | 8.7 | 0.3% | 2026-11-10 |
| CVE-2025-54255Acrobat Reader | Violation of Secure Design Principles (CWE-657)Adobe · Acrobat Reader · CVSS 4 · 2025-09-09 | 4.0 | 0.3% | 2025-09-09 |
| CVE-2025-24887OpenCTI bypass of protected attribute updateOpenCTI-Platform · opencti · CVSS 6.3 · 2025-04-30 | 6.3 | 0.3% | 2025-04-30 |
| CVE-2019-5478A weakness was found in Encrypt Only boot mode in Zynq UltraScale+ devices. This could lead to an adversary being able to modify the control fields of the boot image leading to an…Amd · Zynq UltraScale+ SoC · 2019-09-03 | – | 0.2% | 2019-09-03 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.