CWE-280 vulnerabilities

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kylin. Improper authorization in job information retrieval, where an attacker may get access to unauthorized jobs in other projects. This issue affects Apache Kylin: from 4 through 5.0.3. Users are recommended to upgrade to version 5.0.4, which fixes the issue.

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a GPU register access which can lead to privilege escalation.

In Modem, there is a possible escalation of privilege due to a permissions bypass. This could lead to local escalation of privilege if a malicious actor has already obtained the System privilege. User interaction is not needed for exploitation. Patch ID: MOLY01716533; Issue ID: MSV-6309.

Kernel software installed and running inside a Host VM may post improper commands to the GPU Firmware to trigger a memory read or write outside the permitted range of memory for the host kernel. Addresses passed to the GPU Firmware can be used by the Firmware for more privileged memory accesses than are permitted by the system.

Improper Handling of Insufficient Permissions or Privileges vulnerability in Apache Kvrocks. This issue affects Apache Kvrocks: 2.8.0. Users are recommended to upgrade to version 2.16.0, which fixes the issue.

CVE-2026-40371 is a high-severity vulnerability in Microsoft Dynamics 365 (on-premises) version 9.1 that involves improper handling of insufficient permissions or privileges. This flaw allows an authorized attacker to elevate their privileges over a network. The vulnerability affects versions from 9.0 up to but not including 9.1.0045.0011. An official fix is available in version 9.1.0045.0011. There are no known exploits in the wild at this time.

Improper handling of insufficient privileges in SecTelephonyProvider prior to SMR Jun-2026 Release 1 allows local attackers to access privileged files.

LDAP filter injection vulnerability in Yandex Database prior to 25.3.1.25 allows a remote attacker with valid LDAP credentials to bypass group membership checks resulting in unauthorized access to the database.

A flaw was found in Samba’s vfs_worm module. The module is intended to provide write-once, read-many (WORM) protections by preventing modification of files after a configurable grace period. Due to insufficient validation during rename operations, an authenticated user with write access to a share could overwrite a protected file by renaming a newly created file over the existing WORM-protected file.

Improper handling of insufficient permissions in Routines prior to SMR May-2026 Release 1 allows local attackers to access sensitive information.

Wagtail CMS versions prior to 7.0.7, 7.3.2, and 7.4 contain a vulnerability where users with limited page access can copy pages they are not authorized to access into areas they do have access to. This improper permission handling allows viewing and potential publishing of restricted content. The issue is fixed in versions 7.0.7, 7.3.2, and 7.4.

A vulnerability in Wagtail CMS prior to versions 7.0.7, 7.3.2, and 7.4 allows CMS users with limited access to form pages to delete submissions on pages they do not have access to by crafting specific form submissions. This issue does not affect ordinary site visitors without admin access. The flaw is fixed in versions 7.0.7, 7.3.2, and 7.4.

Wagtail CMS versions prior to 7.0.7, between 7.1 and before 7.3.2, and before 7.4 allow users without edit permissions to access the page history report. This improper permission handling could lead to disclosure of sensitive information. The issue is fixed in versions 7.0.7, 7.3.2, and 7.4.

Vulnerability on the external sharing feature in Cryptobox allows an attacker knowing a sharing link URL to retrieve information from the server allowing an offline brute-force attack of the access code associated to this sharing link.

CVE-2026-20448 is a vulnerability in MediaTek chipsets involving improper handling of insufficient permissions in the geniezone component. It allows local escalation of privilege due to a missing permission check, but only if the attacker already has System privilege. Exploitation does not require user interaction. The vulnerability affects multiple MediaTek chipset versions. The CVSS score is 6.7, indicating medium severity. No official patch or remediation level has been confirmed yet.

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory and files. This is caused by improper handling of GPU memory reservation protections.

Improper handling of insufficient permissions or privileges in Windows Installer allows an authorized attacker to elevate privileges locally.

Insufficient permission validation on multiple REST API Quick Setup endpoints in Checkmk 2.5.0 (beta) before version 2.5.0b2 and 2.4.0 before version 2.4.0p25 allows low-privileged users to perform unauthorized actions or obtain sensitive information

A security audit identified a privilege escalation vulnerability in Operations Agent(<=OA 12.29) on Windows. Under specific conditions Operations Agent may run executables from specific writeable locations.Thanks to Manuel Rickli & Philippe Leiser of Oneconsult AG for reporting this vulnerability

Software installed and run as a non-privileged user may conduct improper GPU system calls to gain write permission to read-only wrapped user-mode memory. This is caused by improper handling of the memory protections for the user-mode wrapped memory resource.