Threats Tagged 'cwe-732'

The HCL DFMPro, DFXAnalytics and DFXServer installers are affected by ‘Insecure file permissions Leading to Privilege Escalation’ vulnerability, which enables any logged-in non-administrative user to overwrite or replace the executable file with a malicious binary.

Incorrect Permission Assignment in BOSH.Utils.psm1 in BOSH-Ecosystem bosh-windows-stemcell-builder allows low-privilege authenticated users to overwrite C:\bosh\service_wrapper.exe or C:\bosh\bosh-agent.exe and gain NT AUTHORITY\SYSTEM on the next service restart or reboot. This can lead to full host control. Affected versions: bosh-windows-stemcell-builder versions prior to v2019.98.

Releases of Red Hat OpenShift Builds 1.7.4

This update includes the following RPMs: dotnet8.0: * aspnetcore-runtime-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * aspnetcore-runtime-dbg-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * aspnetcore-targeting-pack-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * dotnet-apphost-pack-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * dotnet-hostfxr-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * dotnet-runtime-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * dotnet-runtime-dbg-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * dotnet-sdk-8.0-8.0.128-1.2.hum1 (aarch64, x86_64) * dotnet-sdk-8.0-source-built-artifacts-8.0.128-1.2.hum1 (aarch64, x86_64) * dotnet-sdk-dbg-8.0-8.0.128-1.2.hum1 (aarch64, x86_64) * dotnet-targeting-pack-8.0-8.0.28-1.2.hum1 (aarch64, x86_64) * dotnet-templates-8.0-8.0.128-1.2.hum1 (aarch64, x86_64) * dotnet8.0-8.0.128-1.2.hum1.src (src) Security Fix(es): dotnet8.0: * CVE-2026-53486

Incorrect Permission Assignment for Critical Resource, Improper Access Control vulnerability in TUBITAK BILGEM Software Technologies Research Institute Pardus-Parental-Control allows DNS Spoofing. This issue affects Pardus-Parental-Control: from <=0.5.1 before 0.7.0.

Permanent Fork PR Workflow Approval Gate Bypass

Dell PowerProtect Data Domain, versions 7.7.1.0 through 8.6, LTS2026 release version 8.6.1.0 through 8.6.1.10, LTS2025 release version 8.3.1.0 through 8.3.1.30, LTS2024 release versions 7.13.1.0 through 7.13.1.70 contain an incorrect permission Assignment for critical resource vulnerability. A high privileged attacker with local access could potentially exploit this vulnerability, leading to unauthorized access.

A local privilege escalation vulnerability in the WatchGuard Mobile VPN with SSL client for Windows allows a local attacker to escalate their privileges to NT AUTHORITY\SYSTEM on the machine where the client is installed. This issue affects the Mobile VPN with SSL client for Windows up to and including 2026.2.

Overly permissive file permissions in AWS CLI before 1.44.78 (v1) and 2.34.29 (v2) on Unix-like systems where the umask has not been configured to restrict file permissions (the default on most systems) may allow other local users on the same host to read credentials written by certain CLI subcommands (aws codeartifact login, aws iam create-virtual-mfa-device, aws deploy register). To remediate this issue, users should upgrade to AWS CLI 1.44.78 (v1) or 2.34.29 (v2) or later.

mise manages dev tools like node, python, cmake, and terraform. Prior to 2026.6.4, mise's trust feature gates config files (mise.toml, .tool-versions) through trust_check, but task-include files are loaded on a path that never reaches it. When a directory has a task-include dir (mise-tasks/, .mise/tasks/, …) but no config file, mise falls back to the default includes and renders each task's tera fields — and that tera environment has exec() registered. A {{ exec(command='…') }} in any rendered field runs arbitrary commands the moment the tasks are merely listed. There's no config file to gate on, so no trust prompt ever appears. Read-only commands trigger it: mise tasks, mise task ls, mise run, mise tasks --usage (the query shell completion runs on Tab). The victim only has to cd into a cloned repo and list or tab-complete a task. This vulnerability is fixed in 2026.6.4.