CWE-708 · Input Validation and Logic
Incorrect Ownership Assignment
20CVEs
SortMost likely exploited
20 CVEs with CWE-708 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-32726Webauthn tokens not removed after user has been deletednextcloud · security-advisories · CVSS 7.1 · 2021-07-12 | 7.1 | 1.8% | 2021-07-12 |
| CVE-2021-32689Nextcloud Talk not properly disassociating users from chats after account deletionnextcloud · security-advisories · CVSS 8.1 · 2021-07-12 | 8.1 | 1.0% | 2021-07-12 |
| CVE-2022-33737The OpenVPN Access Server installer creates a log file readable for everyone, which from version 2.10.0 and before 2.11.0 may contain a random generated admin passwordOpenvpn · OpenVPN Access Server · 2022-07-06 | – | 0.9% | 2022-07-06 |
| CVE-2023-4008Incorrect Ownership Assignment in GitLabGitLab · GitLab · CVSS 5.3 · 2023-08-03 | 5.3 | 0.7% | 2023-08-03 |
| CVE-2024-9633Incorrect Ownership Assignment in GitLabGitLab · GitLab · CVSS 3.1 · 2024-11-14 | 3.1 | 0.5% | 2024-11-14 |
| CVE-2026-6469PostgreSQL ALTER TABLE ALTER TYPE resets extended statistics ownershipPostgresql · PostgreSQL · CVSS 3.8 · 2026-08-13 | 3.8 | 0.3% | 2026-08-13 |
| CVE-2024-45426Zoom Workplace Apps - Incorrect Ownership AssignmentZoom Communications, Inc · Zoom Workplace Apps · CVSS 4.9 · 2025-02-25 | 4.9 | 0.3% | 2025-02-25 |
| CVE-2024-52561A privilege escalation vulnerability exists in the Snapshot functionality of Parallels Desktop for Mac version 20.1.1 (build 55740). When a snapshot of a virtual machine is delete…Parallels · Parallels Desktop for Mac · CVSS 7.8 · 2025-06-03 | 7.8 | 0.3% | 2025-06-03 |
| CVE-2024-41773IBM Global Configuration Management incorrect ownership assignmentIBM · Global Configuration Management · CVSS 6.5 · 2024-08-20 | 6.5 | 0.3% | 2024-08-20 |
| CVE-2026-32691Timing ownership claim attack on new external back-end secretsCanonical · Juju · CVSS 5.3 · 2026-03-18 | 5.3 | 0.3% | 2026-03-18 |
| CVE-2025-5069Incorrect Ownership Assignment in GitLabGitLab · GitLab · CVSS 3.5 · 2025-09-26 | 3.5 | 0.3% | 2025-09-26 |
| CVE-2026-40196HomeBox has Unauthorized API Access via Retained defaultGroup ID After Group Access Revocationsysadminsmedia · homebox · CVSS 8.1 · 2026-04-17 | 8.1 | 0.2% | 2026-04-17 |
| CVE-2021-26248Philips MRI 1.5T and 3T Incorrect Ownership AssignmentPhilips · MRI 1.5T · CVSS 5.9 · 2021-11-19 | 5.9 | 0.2% | 2021-11-19 |
| CVE-2023-20043A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An att…Cisco · Cisco CX Cloud Agent · CVSS 6.7 · 2023-01-19 | 6.7 | 0.2% | 2023-01-19 |
| CVE-2025-14262Jobs can be saved as workflows with wrong permissions on KNIME Business HubKNIME · KNIME Business Hub · CVSS 5.3 · 2025-12-08 | 5.3 | 0.2% | 2025-12-08 |
| CVE-2024-45417Zoom Apps for macOS - Uncontrolled Resource ConsumptionZoom Communications, Inc · Zoom Apps for macOS · CVSS 6 · 2025-02-25 | 6.0 | 0.2% | 2025-02-25 |
| CVE-2025-5467Ubuntu Apport Insecure File Permissions VulnerabilityCanonical · apport · CVSS 1.9 · 2025-12-10 | 1.9 | 0.2% | 2025-12-10 |
| CVE-2023-29122Incorrect file ownership of privileged service's libraries in Enel X JuiceBoxEnel X · JuiceBox Pro 3.0 22kW Cellular · CVSS 6.7 · 2024-11-05 | 6.7 | 0.2% | 2024-11-05 |
| CVE-2023-20044A vulnerability in Cisco CX Cloud Agent of could allow an authenticated, local attacker to elevate their privileges. This vulnerability is due to insecure file permissions. An att…Cisco · Cisco CX Cloud Agent · CVSS 6.7 · 2023-01-19 | 6.7 | 0.1% | 2023-01-19 |
| CVE-2026-110452The multi-user installer in Nix before 2.35.3 sets the ownership of store contents to the user (who invoked the installer) even though it should be root ownership.NixOS · Nix · CVSS 4 · 2026-10-14 | 4.0 | 0.1% | 2026-10-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.