CWE-693 · Misconfiguration and Insecure Design
Protection Mechanism Failure
885CVEs
14exploited
0with a public check
10likely (EPSS 10%+)
SortMost likely exploited
885 CVEs with CWE-693 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-21412In CISA KEVExploitedInternet Shortcut Files Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.1 · 2024-02-13 | 8.1 | 99% | 2024-02-13 |
| CVE-2013-2465In CISA KEVExploitedUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 Update 45 and earlier, and 5.0 Update 45 and earlier, and Op…Oracle · Java SE · CVSS 9.8 · 2013-06-18 | 9.8 | 99% | 2013-06-18 |
| CVE-2019-1003030In CISA KEVExploitedJenkins Pipeline Groovy Plugin <=2.63 - Insecure DeserializationJenkins project · Jenkins Pipeline: Groovy Plugin · CVSS 9.9 · 2019-03-08 | 9.9 | 97% | 2019-03-08 |
| CVE-2013-0431In CISA KEVExploitedUnspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and OpenJDK 7, allows user-assisted remote attackers to bypass the…Oracle · Java Runtime Environment (JRE) · CVSS 3.7 · 2013-01-31 | 3.7 | 90% | 2013-01-31 |
| CVE-2025-40536In CISA KEVExploitedSolarWinds Web Help Desk < 12.8.8 Hotfix 1 (HF1) - Security Control BypassSolarWinds · Web Help Desk · CVSS 8.1 · 2026-01-28 | 8.1 | 74% | 2026-01-28 |
| CVE-2026-32202In CISA KEVExploitedWindows Shell Spoofing VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 4.3 · 2026-04-14 | 4.3 | 71% | 2026-04-14 |
| CVE-2026-21510In CISA KEVExploitedWindows Shell Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 8.8 · 2026-02-10 | 8.8 | 61% | 2026-02-10 |
| CVE-2025-0411In CISA KEVExploited7-Zip Mark-of-the-Web Bypass Vulnerability7-Zip · 7-Zip · CVSS 7 · 2025-01-25 | 7.0 | 48% | 2025-01-25 |
| CVE-2024-29988In CISA KEVExploitedSmartScreen Prompt Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 8.8 · 2024-04-09 | 8.8 | 45% | 2024-04-09 |
| CVE-2026-21513In CISA KEVExploitedMSHTML Framework Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1607 · CVSS 8.8 · 2026-02-10 | 8.8 | 16% | 2026-02-10 |
| CVE-2024-38213In CISA KEVExploitedWindows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 6.5 · 2024-08-13 | 6.5 | 14% | 2024-08-13 |
| CVE-2024-38217In CISA KEVExploitedWindows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 5.4 · 2024-09-10 | 5.4 | 10% | 2024-09-10 |
| CVE-2024-38226In CISA KEVExploitedMicrosoft Publisher Security Feature Bypass VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 7.3 · 2024-09-10 | 7.3 | 2.7% | 2024-09-10 |
| CVE-2026-58704In CISA KEVExploitedIn Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (proximal/adjacent) escalation of privilege with no additional…Google · Android · CVSS 8.8 · 2026-09-15 | 8.8 | 0.6% | 2026-09-15 |
| CVE-2024-34144A sandbox bypass vulnerability involving crafted constructor bodies in Jenkins Script Security Plugin 1335.vf07d9ce377a_e and earlier allows attackers with permission to define an…Jenkins Project · Jenkins Script Security Plugin · CVSS 9.8 · 2024-05-02 | 9.8 | 48% | 2024-05-02 |
| CVE-2018-20251In WinRAR versions prior to and including 5.61, there is path traversal vulnerability when crafting the filename field of the ACE format. The UNACE module (UNACEV2.dll) creates fi…Check Point Software Technologies Ltd. · WinRAR · 2019-02-05 | – | 31% | 2019-02-05 |
| CVE-2024-29510Artifex Ghostscript before 10.03.1 allows memory corruption, and SAFER sandbox bypass, via format string injection with a uniprint device.Artifex · Ghostscript · CVSS 6.3 · 2024-07-03 | 6.3 | 28% | 2024-07-03 |
| CVE-2018-6794Suricata before 4.0.4 is prone to an HTTP detection bypass vulnerability in detect.c and stream-tcp.c. If a malicious server breaks a normal TCP flow and sends data before the 3-w…Suricata-Ids · Suricata · 2018-02-07 | – | 24% | 2018-02-07 |
| CVE-2025-47984Windows GDI Information Disclosure VulnerabilityMicrosoft · Windows 10 Version 1507 · CVSS 7.5 · 2025-07-08 | 7.5 | 23% | 2025-07-08 |
| CVE-2024-31142x86: Incorrect logic for BTC/SRSO mitigationsXen · Xen · CVSS 7.5 · 2024-05-16 | 7.5 | 17% | 2024-05-16 |
| CVE-2016-0772The smtplib library in CPython (aka Python) before 2.7.12, 3.x before 3.4.5, and 3.5.x before 3.5.2 does not return an error when StartTLS fails, which might allow man-in-the-midd…Python · Python · 2016-09-02 | – | 15% | 2016-09-02 |
| CVE-2026-34938PraisonAI: Python Sandbox Escape via str Subclass startswith() Override in execute_codeMervinPraison · PraisonAI · CVSS 10 · 2026-04-03 | 10.0 | 13% | 2026-04-03 |
| CVE-2025-68668n8n Vulnerable to Arbitrary Command Execution in Pyodide based Python Code Noden8n-io · n8n · CVSS 9.9 · 2025-12-26 | 9.9 | 13% | 2025-12-26 |
| CVE-2024-30050Windows Mark of the Web Security Feature Bypass VulnerabilityMicrosoft · Windows 10 Version 1809 · CVSS 5.4 · 2024-05-14 | 5.4 | 11% | 2024-05-14 |
| CVE-2021-35556Vulnerability in the Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Swing). Supported versions that are affected are Java SE: 7u311, 8u301, 11.0.…Oracle Corporation · Java SE JDK and JRE · CVSS 5.3 · 2021-10-20 | 5.3 | 8.4% | 2021-10-20 |
| CVE-2017-10952This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 8.2.0.2051. User interaction is required to exploit this vulnerabi…Zero Day Initiative · Foxit Reader · 2017-08-29 | – | 7.2% | 2017-08-29 |
| CVE-2017-3197GIGABYTE BRIX UEFI firmware fails to securely implement BIOS write protectionGIGABYTE · GB-BSi7H-6500 · 2018-07-09 | – | 5.6% | 2018-07-09 |
| CVE-2022-32845This issue was addressed with improved checks. This issue is fixed in watchOS 8.7, iOS 15.6 and iPadOS 15.6, macOS Monterey 12.5. An app may be able to break out of its sandbox.Apple · macOS · CVSS 10 · 2022-09-23 | 10.0 | 5.4% | 2022-09-23 |
| CVE-2021-32835Groovy Sandbox escape in Eclipse Ketieclipse · keti · 2021-09-09 | – | 4.6% | 2021-09-09 |
| CVE-2018-9318The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.Bmw · Telematics Control Unit Firmware · 2018-05-31 | – | 4.1% | 2018-05-31 |
| CVE-2022-21283Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Libraries). Supported versions that are affected are Oracle Java SE: 1…Oracle Corporation · Java SE JDK and JRE · CVSS 5.3 · 2022-01-19 | 5.3 | 4.1% | 2022-01-19 |
| CVE-2022-42821A logic issue was addressed with improved checks. This issue is fixed in macOS Monterey 12.6.2, macOS Big Sur 11.7.2, macOS Ventura 13. An app may bypass Gatekeeper checks.Apple · macOS · CVSS 5.5 · 2022-12-15 | 5.5 | 3.9% | 2022-12-15 |
| CVE-2018-9311The Telematics Control Unit (aka Telematic Communication Box or TCB), when present on BMW vehicles produced in 2012 through 2018, allows a remote attack via a cellular network.Bmw · Telematics Control Unit Firmware · 2018-05-31 | – | 3.8% | 2018-05-31 |
| CVE-2020-10887This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 Firmware Ver: 190726 AC1750 routers. Authentication is not required to exploit this vuln…TP-Link · Archer A7 · CVSS 8.1 · 2020-03-25 | 8.1 | 3.7% | 2020-03-25 |
| CVE-2021-27245This vulnerability allows a firewall bypass on affected installations of TP-Link Archer A7 prior to Archer C7(US)_V5_210125 and Archer A7(US)_V5_200220 AC1750 routers. Authenticat…TP-Link · Archer A7 · CVSS 8.1 · 2021-03-29 | 8.1 | 3.3% | 2021-03-29 |
| CVE-2022-35978Lua sandbox escape from mod in Minetestminetest · minetest · CVSS 7.7 · 2022-08-15 | 7.7 | 3.1% | 2022-08-15 |
| CVE-2018-0383A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a file policy that is configured to block the…Cisco · Cisco FireSIGHT unknown · 2018-07-16 | – | 3.0% | 2018-07-16 |
| CVE-2018-14281This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerabi…Foxit · Foxit Reader · 2018-07-31 | – | 2.7% | 2018-07-31 |
| CVE-2018-14280This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Foxit Reader 9.0.1.1049. User interaction is required to exploit this vulnerabi…Foxit · Foxit Reader · 2018-07-31 | – | 2.7% | 2018-07-31 |
| CVE-2018-0384A vulnerability in the detection engine of Cisco FireSIGHT System Software could allow an unauthenticated, remote attacker to bypass a URL-based access control policy that is conf…Cisco · Cisco FireSIGHT unknown · 2018-07-16 | – | 2.5% | 2018-07-16 |
| CVE-2023-38157Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 6.5 · 2023-08-07 | 6.5 | 2.5% | 2023-08-07 |
| CVE-2022-31479Remote Code Execution via command injection of the hostnameLenelS2 · LNL-X2210 · CVSS 9.6 · 2022-06-06 | 9.6 | 2.4% | 2022-06-06 |
| CVE-2022-21626Vulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: Security). Supported versions that are affected are Oracle Java SE: 8u…Oracle Corporation · Java SE JDK and JRE · CVSS 5.3 · 2022-10-18 | 5.3 | 2.4% | 2022-10-18 |
| CVE-2021-32960Rockwell Automation FactoryTalk Services Platform Protection Mechanism FailureRockwell Automation · FactoryTalk Services Platform · CVSS 8.5 · 2022-04-01 | 8.5 | 2.4% | 2022-04-01 |
| CVE-2017-8864Client-side enforcement using JavaScript of server-side security options on the Cohu 3960HD allows an attacker to manipulate options sent to the camera and cause malfunction or co…Cohuhd · 3960hd Firmware · 2017-11-22 | – | 2.3% | 2017-11-22 |
| CVE-2020-3299Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass VulnerabilityCisco · Cisco Firepower Threat Defense Software · CVSS 5.8 · 2020-10-21 | 5.8 | 2.3% | 2020-10-21 |
| CVE-2018-0094A vulnerability in IPv6 ingress packet processing for Cisco UCS Central Software could allow an unauthenticated, remote attacker to cause a denial of service (DoS) condition due t…Cisco · Cisco UCS Central Software · 2018-01-18 | – | 2.3% | 2018-01-18 |
| CVE-2020-3315Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass VulnerabilityCisco · Cisco Firepower Threat Defense Software · CVSS 5.8 · 2020-05-06 | 5.8 | 2.2% | 2020-05-06 |
| CVE-2023-33150Microsoft Office Security Feature Bypass VulnerabilityMicrosoft · Microsoft Office 2019 · CVSS 9.6 · 2023-07-11 | 9.6 | 2.1% | 2023-07-11 |
| CVE-2024-26163Microsoft Edge (Chromium-based) Security Feature Bypass VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 4.7 · 2024-03-14 | 4.7 | 2.1% | 2024-03-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.