Advisories · Weakness
CWE-641.
Every Advisory and CVE whose sources give the weakness CWE-641, newest first.
- CVSS 7.8 High
Python Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-641
- CVSS 4.9 Medium
Cisco Identity Services Engine Authenticated Write Vulnerability
- Cisco Identity Services Engine Software
- CWE-641
- CVSS 7.5 High
Path traversal in Eclipse Foundation Eclipse Mojarra
- Eclipse Foundation Eclipse Mojarra
- Path traversal
- Code injection
- CVSS 7.8 High
GitHub Copilot Remote Code Execution Vulnerability
- Microsoft GitHub Copilot Plugin for JetBrains IDEs
- CWE-641
- CVSS 8.3 High
yt-dlp: Dangerous file type creation via insufficient filename sanitization (Bypass of CVE-2024-38519)
- CWE-641
<2026.6.9 · fixed in 2026.6.9
GHSA-c6mh-fpjc-4pr3 · CVE-2026-50023 - CVSS 8.8 High
Code execution vulnerability in SWIG code generation in cmd/go
- CWE-641
<1.25.9 || >=1.26.0-0, <1.26.2 · fixed in 1.25.9, 1.26.2
GO-2026-4871 · CVE-2026-27140 - CVSS 6.9 Medium
Luminance Studio 2.17 Denial of Service via Malformed Input
- Pixarra Luminance Studio
- CWE-641
- CVSS 8.8 High
Active Directory Domain Services Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-641
- CVSS 7.8 High
Microsoft Office Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- CWE-641
- CVSS 8.4 High
Microsoft Office Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2016
- CWE-641
- CVSS 6.5 Medium
Axis Communications AB AXIS OS: 51l3nc3, member of the AXIS OS Bug Bounty Program…
- Axis Communications AB AXIS OS
- CWE-641
- CVSS 7.8 High
Microsoft Office OneNote Remote Code Execution Vulnerability
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC for Mac 2024
- CWE-641
- CVSS 7.8 High
Microsoft Outlook Remote Code Execution Vulnerability
- Microsoft Office LTSC for Mac 2021
- Microsoft Office LTSC for Mac 2024
- CWE-641
- CVSS 5.3 Medium
Arbitrary language parameter can passed to `aspell` executable via spelling requests in overleaf
- overleaf
- Path traversal
- CWE-641
- CVSS 6.7 Medium
Windows Distributed File System (DFS) Remote Code Execution Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-641
- CVSS 7.2 High
Improper Restriction of Names for Files and Other Resources in lirantal/daloradius
- lirantal/daloradius
- CWE-641
- CVSS 6.5 Medium
Exposure of local files in github.com/cortexproject/cortex
- Path traversal
- CWE-184
>=1.13.0, <1.13.2 || >=1.14.0, <1.14.1 · fixed in 1.13.2, 1.14.1
GHSA-cq2g-pw6q-hf7j · CVE-2022-23536 - CVSS 8.8 High
Bosch BF-OS: File path manipulation vulnerability in BF-OS version 3.00 up to and including 3.83…
- Bosch BF-OS
- CWE-641
- CVSS 8.8 High
Arbitrary command execution on Windows via qutebrowserurl: URL handler
- Command injection
- CWE-641
>=1.7.0, <2.4.0 · fixed in 2.4.0
GHSA-vw27-fwjf-5qxm · CVE-2021-41146 - CVSS 9.8 CriticalCritical · CVSS 9+
Object injection in PHPMailer/PHPMailer
- Insecure deserialization
- CWE-641
>=6.1.8, <6.4.1 · fixed in 6.4.1
GHSA-m298-fh5c-jc66 · CVE-2020-36326