CWE-281.

Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

• Samsung Semiconductor Exynos 1480
• Samsung Semiconductor Exynos 2400
• CWE-281

Arbitrary Operations via SCIM Endpoints in Multiple WSO2 Products Enables User Account Takeover

• WSO2 Identity Server as Key Manager
• WSO2 Open Banking IAM
• Information disclosure
• CWE-281

Wasmtime: WASI hard links bypass wasmtime-wasi's FilePerms for destination

• Broken access control
• CWE-281

<24.0.11 || >=25.0.0, <36.0.12 || >=37.0.0, <45.0.3 || >=46.0.0, <46.0.1 · fixed in 24.0.11, 36.0.12, 45.0.3, 46.0.1

Multiple jail filesystem root escapes

• FreeBSD
• CWE-273
• CWE-281

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved.

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-281

NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DM…

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-281

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved.

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-281

NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved.

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-281

uutils coreutils 0.0.18 before 0.10.0 Privilege Escalation via setuid

• uutils coreutils
• CWE-281

OpenFGA: ListUsers returns a deliberately-excluded user when a `but not` exclusion under a type-bound wildcard is intersected (`and`) with another relation that also grants that user

• Broken access control
• CWE-281

<1.18.1 · fixed in 1.18.1

Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys

• Gen Digital Avast Free Antivirus, Avast One, Avast Premium Security, Avast Ultimate, Avast Business Security
• Gen Digital AVG Antivirus Free, AVG Internet Security, AVG Ultimate
• Broken access control
• CWE-281

Go-getter vulnerable to a privilege escalation issue in its archive decompression handling

• HashiCorp Shared library
• CWE-281

rclone: Directory metadata (chmod/chown/chtimes) applied through a planted symlink in rclone local --links escapes the destination

• Path traversal
• CWE-281

<1.75.1 · fixed in 1.75.1

Improper Access Control via Secret Type Management API in WSO2 Identity Server

• WSO2 Identity Server
• WSO2 Carbon Identity API Server Secret Management Common
• CWE-281

Gitea: GHSA-8fwc-qjw5-rvgp ClearRepoWatches fix not applied to API EditRepo path — sister code path retains stale watches on public->private

• Information disclosure
• CWE-281

<1.27.0 · fixed in 1.27.0

oxenstored keeps quota related use counts across domain destruction

• oxenstored
• CWE-281

mknod: Device nodes created mislabeled on SELinux, with broken cleanup (remove_dir on a node)

• Broken access control
• CWE-281

<0.6.0 · fixed in 0.6.0

mkfifo: permissions of an existing file are changed after FIFO creation fails

• Broken access control
• CWE-281

<0.6.0 · fixed in 0.6.0

Tarfile.extract() doesn't fully respect filter parameter

• Python Software Foundation CPython
• CWE-281

Stale PSA ClusterRoleBinding Persists After RoleTemplate Downgrade in Rancher

• SUSE Rancher
• CWE-281

golang.org/x/crypto vulnerable to invoking bypass of certificate restrictions

• Weak cryptography or TLS
• CWE-281

<0.52.0 · fixed in 0.52.0

WordPress wpForo Forum plugin < 3.0.2 - Broken Access Control vulnerability

• Tomdever wpForo Forum
• CWE-281

Synology Surveillance Station: Improper preservation of permissions vulnerability in Archiving Push functionality in…

• Synology Surveillance Station
• CWE-281

NVIDIA Display Driver for Linux contains a vulnerability in a kernel mode layer handler, where a user could cause improper permission handling.

• NVIDIA GeForce
• NVIDIA RTX, Quadro, NVS
• CWE-281

Invoking agent constraints dropped when forwarding keys in golang.org/x/crypto/ssh/agent

• CWE-281

<0.52.0 · fixed in 0.52.0

Joplin Server delta API returns note content after share access is revoked

• laurent22 joplin
• Information disclosure
• Broken access control

filemanagement_storage_service has an improper preservation of permissions vulnerability

• OpenHarmony
• CWE-281

MantisBT has an authorization bypass that allows reading attachments after losing access to a private issue

• Information disclosure
• CWE-281

<2.28.2 · fixed in 2.28.2

Improper Access Control via Gateway API in Multiple WSO2 Products Allows Unauthorized Operations

• WSO2 API Control Plane
• WSO2 Universal Gateway
• CWE-281

Snipe-IT has Privilege Escalation via API Permissions Assignment

• Broken access control
• CWE-281

<8.4.1 · fixed in 8.4.1

uutils coreutils doesn't properly handle setuid and setgid bits when ownership preservation fails

• CWE-281

<=0.8.0 · no fixed version yet

uutils coreutils doesn't preserve file ownership during moves across different filesystem boundaries

• CWE-281

<=0.8.0 · no fixed version yet

Duplicate Advisory: uutils coreutils has an Improper Preservation of Permissions issue

• CWE-281

<0.6.0 · fixed in 0.6.0

OpenBSD OpenSSH: In OpenSSH before 10.3, a file downloaded by scp may be installed setuid or setgid…

• OpenBSD OpenSSH
• CWE-281

Kata Container to Guest micro VM privilege escalation

• Broken access control
• CWE-281

<0.0.0-20260219090056-6a672503973b · fixed in 0.0.0-20260219090056-6a672503973b

A vulnerability exists in Quick Heal Total Security 23.0.0 in the quarantine management component where insufficient validation of restore paths and improper permission handling allow a low-privilege…

• Privilege escalation
• Information disclosure

Networkmanager: networkmanager file access

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-281

node: A flaw in Node.js’s Permissions model allows attackers to bypass `--allow-fs-read` and…

• node
• CWE-281
• CWE-289

3scale-porta: readonly fields not validated server-side

• 3scale porta
• Red Hat 3scale API Management Platform 2
• CWE-281

Improper preservation of permissions in Elastic Defend on Windows hosts can lead to arbitrary files on the system being deleted by the Defend service running as SYSTEM.

• Elastic Kibana
• CWE-281

Nagios Log Server < 2024R1.3.2 Set Email Privilege Escalation

• Nagios Log Server
• CWE-281

Rancher user retains access to clusters despite Global Role removal in github.com/rancher/rancher

• CWE-281

<0.0.0-20251014212116-7faa74a968c2 · fixed in 0.0.0-20251014212116-7faa74a968c2

In multiple functions of GrantPermissionsActivity.java , there is a possible way to trick the user into granting the incorrect permission due to permission overload.

• Google Android
• CWE-281

pyLoad is vulnerable to attacks that bypass localhost restrictions, enabling the creation of arbitrary packages

• Broken access control
• Authentication bypass

<=0.5.0b3.dev88 · no fixed version yet

Duplicate Advisory: GHSA-x698-5hjm-w2m5

• CWE-281

<=0.5.0b3.dev77 · no fixed version yet

Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

• Salesforce OmniStudio
• CWE-281

Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (DataMapper)…

• Salesforce OmniStudio
• CWE-281

Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

• Salesforce OmniStudio
• CWE-281

Salesforce OmniStudio: Improper Preservation of Permissions vulnerability in Salesforce OmniStudio (FlexCards)…

• Salesforce OmniStudio
• CWE-281

Pasteboard has an improper preservation of permissions vulnerability

• OpenHarmony
• CWE-281

security_access_token has an improper preservation of permissions vulnerability

• OpenHarmony
• CWE-281

security_access_token has an improper preservation of permissions vulnerability

• OpenHarmony
• CWE-281

telephony_call_manager has an improper preservation of permissions vulnerability

• OpenHarmony
• CWE-281

SystemUI component protection settings vulnerability

• vivo SystemUI
• CWE-281

HP Support Assistant – Potential Escalation of Privilege

• HP, Inc. HP Support Assistant
• CWE-281

Privilege escalation in the management console of Absolute Secure Access prior to version 13.54

• Absolute Security Secure Access
• CWE-281

An issue in modernwms v.1.0 allows an attacker view the MD5 hash of the administrator password and other attributes without authentication, even after initial configuration and password change.

• CWE-281

Cascading protection is not preventing file reversions

• Wikimedia Foundation MediaWiki
• CWE-281

"reupload-own" restriction can be bypassed by reverting file

• Wikimedia Foundation MediaWiki
• CWE-281

A parsing issue in the handling of directory paths was addressed with improved path validation.

• Apple iOS and iPadOS
• Apple macOS
• CWE-281