FreeRDP versions from 2.0.0 before 3.32.0 have a vulnerability in the winpr-makecert tool where private keys are created without proper owner-only file permissions. This allows local users on multi-user Unix systems to read these world-readable key files or access PFX files protected by a default hard-coded password, potentially leading to private key theft.
FreeRDP versions from 3.0.0 before 3.32.0 have an incorrect permission assignment vulnerability. This flaw allows local users on multi-user Unix systems to read private keys that should be owner-only during soft-smartcard logon. The vulnerability arises because the private keys written by crypto_write_pem are not restricted properly, making them world-readable in a shared temporary directory.
MariaDB server versions from 10.6.1 up to but excluding 10.6.28, 10.11.1 up to 10.11.19, 11.4.1 up to 11.4.13, 11.8.1 up to 11.8.9, 12.3.1 up to 12.3.3, and 13.0.1 up to 13.0.2 have a vulnerability where the mysql service account's home directory is set to the database data directory. This allows a database user with FILE privilege to write startup dot-files such as .bash_profile that execute when an administrator opens a login shell for the mysql account. Debian packages are not affected due to using /nonexistent as the home directory. The issue is fixed in the listed fixed versions.
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain an incorrect permission assignment vulnerability. This flaw allows a low privileged local attacker to potentially disclose information, bypass protection mechanisms, and gain unauthorized access. The vulnerability is identified as CWE-732 and has a medium severity with a CVSS score of 6.3. No patch information is provided in the input data.
Incorrect permission assignment in GlavSoft TightVNC Server for Windows before 2.8.88 allows a local authenticated user to read or overwrite the inter-process communication handles used between the TightVNC service and its desktop server process. The named shared memory segment in the Global\ namespace that carries the pipe HANDLE values is created with a NULL DACL, and its name is derived from a time-seeded srand(time(0)) value that is predictable to one-second granularity. A low-privileged local process can open the mapping and tamper with the IPC channel of a service running as SYSTEM, potentially leading to disclosure of session data, privilege escalation, or denial of service.
An improper file permission and missing authorization vulnerability exists in the diagnostic kernel module subsystem of Brocade Fabric OS versions before 9.2.2d and 10.0.0 through 10.0.0a1. An unprivileged local user can invoke privileged hardware tests, force system error conditions, reset hardware blades, or disrupt storage fabric operations.
Dell System Update versions prior to 2.3.0.0 contain an incorrect permission assignment vulnerability that allows a low privileged local attacker to potentially elevate their privileges. This vulnerability is identified as CWE-732 and has a high severity rating with a CVSS score of 8.2. Exploitation requires local access and user interaction. No patch information is currently provided.
Quasar Framework is a framework for building high-performance Vue.js user interfaces. Prior to @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0, the @quasar/ssl-certificate utility cached a combined private key and certificate PEM without explicitly applying owner-only filesystem permissions. Another local user able to read the cache can copy the key and impersonate a development TLS endpoint in an environment that trusts the certificate. The generated certificate was also CA-capable, carried unnecessarily broad key usages, and encoded the IPv6 loopback address as a DNS subject alternative name. This issue is fixed in @quasar/ssl-certificate 2.1.0, @quasar/cli 5.0.4, and @quasar/app-vite 3.3.0.
A vulnerability in adm-zip versions prior to 0.6.1 allows incorrect permission assignment when extracting ZIP archives with the keepOriginalPermission flag enabled. The library does not filter out setuid/setgid/sticky bits, enabling an attacker to craft a ZIP archive that results in a root-owned setuid file. This can lead to privilege escalation when the extracted file is executed by a less privileged user. Version 0.6.1 addresses this issue.
Nx is a monorepo solution for TypeScript and polyglot codebases. From 14.6.0 until 22.7.9 and 23.1.2, Nx creates Unix domain sockets for its daemon and isolated plugin workers in shared temporary locations without owner-only directory and socket permissions. Another unprivileged local account on a shared build server, developer host, or multi-user container can discover and connect to a running socket because the transport performs no authentication and relies on filesystem containment. The daemon's PROCESS_IN_BACKGROUND request accepts a module path and invokes its default export, allowing a caller that controls a file to execute code as the account running Nx; other handlers can expose workspace file contents, project graphs, and task hashes. Disabling the daemon alone does not remove the vulnerable plugin-worker sockets, while single-user machines without another local account are not exposed. This issue is fixed in versions 22.7.9 and 23.1.2.
CVE-2026-47518 is a vulnerability in the NVIDIA GeForce GPU Display Driver for Windows and Linux. It involves incorrect permission assignment in a secure microcontroller component, allowing a local attacker with high privileges to modify protected memory. Exploitation could lead to code execution and privilege escalation. The vulnerability has a medium severity rating with a CVSS score of 6. No specific affected versions or patches are provided in the available data.
The central cloud storage backend for the entire dashcam platform is misconfigured with public-read permissions, allowing unrestricted access to all stored objects. Because this bucket serves as shared storage for the platform, sensitive user records, live dashcam footage, application packages, and firmware files are exposed to anyone on the internet.
CVE-2026-84414 is a high-severity vulnerability in IBM i versions 7.3, 7.4, 7.5, and 7.6. It allows a local authenticated attacker to change ownership of arbitrary files due to improper validation of file paths. This incorrect permission assignment could lead to full confidentiality, integrity, and availability compromise of affected systems.
Dell Secure Connect Gateway (SCG) Policy Manager versions prior to 5.34.00.16 contain a vulnerability involving incorrect permission assignment for a critical resource. This flaw allows a low privileged local attacker to potentially elevate their privileges. The vulnerability has a high severity rating with a CVSS score of 7.8. No official patch or remediation details are provided in the input data.
Incorrect Permission Assignment for Critical Resource vulnerability in ABB Protection and control IED manager (PCM600).
This issue affects Protection and control IED manager (PCM600): through 2.14.
Dell Trusted Device Client versions prior to 8.1.359.0 have an incorrect permission assignment vulnerability. This flaw allows a low privileged local attacker to tamper with information. The vulnerability does not require user interaction and affects confidentiality and integrity but not availability. It has a high severity score of 7.1.
When a Tauri application uses the dialog plugin's file or folder picker, an attacker with JavaScript execution (XSS) can force the scope expansion to be recursive, granting read/write access to an entire directory tree after a single user click on a normal-looking OS file dialog. The user has no indication that recursive access was granted, and the expanded scope cannot be revoked for the lifetime of the application.
A local privilege escalation vulnerability exists in the installer of Foxit PDF Editor for macOS due to insufficient validation of a user-modifiable configuration value during high-privilege upgrades. A local attacker could exploit this issue to execute arbitrary commands with root privileges.
A local privilege escalation vulnerability exists in the update daemon of Foxit PDF Editor/Reader due to an insecure permission configuration that allows the configuration file to be modified by regular users, which may lead to arbitrary script execution with higher privileges.