CWE-390.

Sandboxie-Plus: Sandbox containment bypass

• Sandboxie
• Information disclosure
• Broken access control

Guest access to Firecracker process memory after a failed memory discard

• AWS firecracker
• Memory corruption
• CWE-390

Django REST framework: TokenProxy.delete() reports success and revokes nothing

• Authentication bypass
• CWE-390

>=3.12.0, <3.18.2 · fixed in 3.18.2

Mage OSS through 0.9.80 before 76c4f46 can proceed with session creation upon encountering an unknown OAuth provider.

• mage-ai
• CWE-390

@fastify/jwt vulnerable to missing token expiration when temporal options cannot be parsed

• @fastify/jwt
• Authentication bypass
• CWE-390

Improper MLS Welcome roster validation in Discord libdave allows unauthorized group membership

• Discord libdave
• Broken access control
• CWE-390

Fail-open error handling in the data masking utility in Powertools for AWS Lambda (Python)

• AWS powertools-lambda-python
• CWE-390

AsyncHttpClient doesn't verify SCRAM and Digest mutual-authentication responses

• Authentication bypass
• CWE-390

>=3.0.8, <3.0.12 · fixed in 3.0.12

CyberPanel before 2.4.4 omits a "return 0" that is required by the business logic.

• CyberPanel
• CWE-390

util-linux libmount Privilege Escalation via Failed Mount Helper

• util-linux
• CWE-390

Libssh: libssh: denial of service via unchecked proxycommand fork() failure

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• CWE-390

Apache Tomcat util accepted misconfigured CRLs

• CWE-390

>=11.0.0-M1, <11.0.23 || >=10.1.0-M7, <10.1.56 || >=9.0.83, <9.0.119 · fixed in 11.0.23, 10.1.56, 9.0.119

nvmet-tcp: propagate nvmet_tcp_build_pdu_iovec() errors to its callers

• Linux kernel
• CWE-390

pam_usb: pusb_has_virtual_input_device() silently discards EACCES, disabling remote desktop detection under non-root execution

• mcdope pam_usb
• CWE-390
• CWE-693

crypto: pcrypt - Fix handling of MAY_BACKLOG requests

• Linux kernel
• CWE-390

gitsign --verify panics on empty-certificate PKCS7 and exits 0, bypassing exit-code callers

• CWE-129
• CWE-390

>=0.4.0, <0.15.0 · fixed in 0.15.0

Improper handling of error condition during host-induced faults can allow a local high-privileged attack to selectively drop guest DMA writes, potentially resulting in a loss of SEV-SNP guest memory…

• AMD EPYC™ 9005 Series Processors
• AMD EPYC™ Embedded 9005 Series Processors
• CWE-390

Dell Alienware Command Center: Dell Alienware Command Center 6.x (AWCC), versions prior to 6.10.15.0…

• Dell Alienware Command Center
• CWE-390

Detection of Error Condition Without Action in Computer Vision

• Qualcomm, Inc. Snapdragon
• CWE-390

Detection of Error Condition Without Action in Hypervisor

• Qualcomm, Inc. Snapdragon
• CWE-390

Openssh: machine-in-the-middle attack if verifyhostkeydns is enabled

• Red Hat Enterprise Linux 8
• Red Hat Enterprise Linux 9
• CWE-390

`gh attestation verify` returns incorrect exit code during verification if no attestations are present

• CWE-390

>=2.49.0, <2.67.0 · fixed in 2.67.0

Rsync: rsync server leaks arbitrary client files

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 9
• CWE-390

Under certain uncommon site configurations, a bug in the CKEditor 5 module can cause some image uploads to move the entire webroot to a different location on the file system. This could be exploite...

• CWE-390

>=10.0.0, <10.2.10 · fixed in 10.2.10

HTTP/2: CPU exhaustion due to CONTINUATION frame flood

• envoy
• CWE-390

HTTP/2: memory exhaustion due to CONTINUATION frame flood

• envoy
• CWE-390

Cisco IOS XE Software: A vulnerability in the data model interface (DMI) services of Cisco IOS XE Software could…

• Cisco IOS XE Software
• CWE-390

Gerbv: An out-of-bounds write vulnerability exists in the drill format T-code tool number…

• Gerbv
• CWE-390

An exploitable heap-based buffer overflow vulnerability exists when loading a PCX file in SDL2_image, version 2.0.4.

• Simple DirectMedia
• CWE-390

PostgreSQL: In PostgreSQL 9.3.x before 9.3.17, 9.4.x before 9.4.12, 9.5.x before 9.5.7…

• PostgreSQL
• CWE-390