# CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

## Records, newest first (an older page)

- [Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure](https://agentprime.io/advisories/CVE-2025-67460.md)
  `CVE-2025-67460` · CVE record: Zoom Communications Inc. Zoom Rooms · CVSS 7.8 High · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-693
- [Legality WHISTLEBLOWING Missing Critical HTTP Security Headers](https://agentprime.io/advisories/CVE-2025-34413.md)
  `CVE-2025-34413` · CVE record: DigitalPA S.r.l. Legality WHISTLEBLOWING · CVSS 7.1 High · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-693
- [HTTP/HTTPS Traffic Interception Bypass in mad-proxy](https://agentprime.io/advisories/GHSA-wx63-35hw-2482.md)
  `GHSA-wx63-35hw-2482`, `CVE-2025-67485`, `PYSEC-2026-1596` · PyPI `mad-proxy`: affected `<=0.3`, no fixed version yet · CVSS 5.3 Medium · Not analysed yet · Published 9 Dec 2025 · Tags: CWE-693
- [WBCE CMS allows brute-force protection bypass using X-Forwarded-For header](https://agentprime.io/advisories/CVE-2025-66204.md)
  `CVE-2025-66204` · CVE record: WBCE WBCE_CMS · CVSS 6.3 Medium · Not analysed yet · Published 8 Dec 2025 · Tags: Authentication bypass, CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48626.md)
  `CVE-2025-48626` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 8 Dec 2025 · Tags: CWE-693
- [Envoy forwards early CONNECT data in TCP proxy mode](https://agentprime.io/advisories/GHSA-rj35-4m94-77jh.md)
  `GHSA-rj35-4m94-77jh`, `BIT-envoy-2025-64763`, `CVE-2025-64763` · Go `github.com/envoyproxy/envoy`: affected `<1.33.13 || >=1.34.0, <1.34.11 || >=1.35.0, <1.35.7 || >=1.36.0, <1.36.3`, fixed in `1.33.13`, `1.34.11`, `1.35.7`, `1.36.3` · CVSS 3.7 Low · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-693
- [Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing](https://agentprime.io/advisories/GHSA-9gqj-5w7c-vx47.md)
  `GHSA-9gqj-5w7c-vx47`, `CVE-2025-66479` · npm `@anthropic-ai/sandbox-runtime`: affected `<0.0.16`, fixed in `0.0.16` · CVSS 1.8 Low · Not analysed yet · Published 4 Dec 2025 · Tags: CWE-693
- [Protection mechanism failure in ESTsoft ALZip](https://agentprime.io/advisories/CVE-2025-29864.md)
  `CVE-2025-29864` · CVE record: ESTsoft ALZip · CVSS 6.2 Medium · Not analysed yet · Published 3 Dec 2025 · Tags: CWE-693
- [Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set](https://agentprime.io/advisories/CVE-2025-65100.md)
  `CVE-2025-65100` · CVE record: ilbers isar · CVSS 6.9 Medium · Not analysed yet · Published 19 Nov 2025 · Tags: CWE-693
- [WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass](https://agentprime.io/advisories/CVE-2025-11260.md)
  `CVE-2025-11260` · CVE record: benmoody WP Headless CMS Framework · CVSS 5.3 Medium · Not analysed yet · Published 13 Nov 2025 · Tags: CWE-693
- [GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-62453.md)
  `CVE-2025-62453` · CVE record: Microsoft Visual Studio Code · CVSS 5.0 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-693, CWE-1426
- [Protection mechanism failure in Slim Bootloader](https://agentprime.io/advisories/CVE-2025-35968.md)
  `CVE-2025-35968` · CVE record: Slim Bootloader · CVSS 7.1 High · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-693
- [Protection mechanism failure in Intel(R) NPU Drivers](https://agentprime.io/advisories/CVE-2025-26402.md)
  `CVE-2025-26402` · CVE record: Intel(R) NPU Drivers · CVSS 6.8 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-693
- [Protection mechanism failure in Intel(R) CIP software](https://agentprime.io/advisories/CVE-2025-24848.md)
  `CVE-2025-24848` · CVE record: Intel(R) CIP software · CVSS 5.4 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-693
- [Protection mechanism failure in Intel(R) CIP software](https://agentprime.io/advisories/CVE-2025-24834.md)
  `CVE-2025-24834` · CVE record: Intel(R) CIP software · CVSS 6.0 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-693
- [Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection](https://agentprime.io/advisories/CVE-2025-10905.md)
  `CVE-2025-10905` · CVE record: Avast Free Antivirus · CVSS 4.4 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2025-12909.md)
  `CVE-2025-12909` · CVE record: Google Chrome · CVSS 5.3 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2025-12906.md)
  `CVE-2025-12906` · CVE record: Google Chrome · CVSS 5.4 Medium · Not analysed yet · Published 7 Nov 2025 · Tags: CWE-693
- [Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH](https://agentprime.io/advisories/GHSA-j2pc-v64r-mv4f.md)
  `GHSA-j2pc-v64r-mv4f` · Maven `io.github.ascopes:protobuf-maven-plugin`: affected `>=4.0.0, <4.0.2 || <3.10.2`, fixed in `4.0.2`, `3.10.2` · CVSS 4.0, no score published · Not analysed yet · Published 4 Nov 2025 · Tags: CWE-354, CWE-693
- [Protection mechanism failure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2025-43413.md)
  `CVE-2025-43413` · CVE record: Apple iOS and iPadOS and 4 more · CVSS 7.5 High · Not analysed yet · Published 4 Nov 2025 · Tags: Broken access control, CWE-693
- [Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability](https://agentprime.io/advisories/CVE-2025-60711.md)
  `CVE-2025-60711` · CVE record: Microsoft Microsoft Edge (Chromium-based) · CVSS 6.3 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-693
- [Missing Security Headers](https://agentprime.io/advisories/CVE-2025-12554.md)
  `CVE-2025-12554` · CVE record: Azure Access Technology BLU-IC2 and 1 more · CVSS 6.9 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-693
- [OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing](https://agentprime.io/advisories/CVE-2025-12094.md)
  `CVE-2025-12094` · CVE record: oopspam OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) · CVSS 5.3 Medium · Not analysed yet · Published 31 Oct 2025 · Tags: CWE-693
- [HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)](https://agentprime.io/advisories/CVE-2025-0277.md)
  `CVE-2025-0277` · CVE record: HCL Software BigFix Mobile · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: Cross-site scripting (XSS), CWE-693
- [HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)](https://agentprime.io/advisories/CVE-2025-0276.md)
  `CVE-2025-0276` · CVE record: HCL Software BigFix Modern Client Management · CVSS 6.5 Medium · Not analysed yet · Published 16 Oct 2025 · Tags: Cross-site scripting (XSS), CWE-693
- [HCL Unica Platform is impacted by misconfigured security related HTTP headers](https://agentprime.io/advisories/CVE-2025-52615.md)
  `CVE-2025-52615` · CVE record: HCL Software Unica Platform · CVSS 3.5 Low · Not analysed yet · Published 12 Oct 2025 · Tags: CWE-693
- [Cross-site request forgery in Apple macOS](https://agentprime.io/advisories/CVE-2025-43296.md)
  `CVE-2025-43296` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 9 Oct 2025 · Tags: Cross-site request forgery (CSRF), CWE-693, CWE-703
- [An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD.](https://agentprime.io/advisories/CVE-2025-55886.md)
  `CVE-2025-55886` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 22 Sept 2025 · Tags: CWE-693
- [Duplicate Advisory: Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports](https://agentprime.io/advisories/GHSA-hf6h-9wq7-hmjg.md)
  `GHSA-hf6h-9wq7-hmjg` · PyPI `picklescan`: affected `<0.0.31`, fixed in `0.0.31` · CVSS 4.0, no score published · Withdrawn · Not analysed yet · Published 17 Sept 2025 · Tags: CWE-693
- [Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface](https://agentprime.io/advisories/CVE-2025-37124.md)
  `CVE-2025-37124` · CVE record: Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway · CVSS 8.6 High · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-693
- [Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component](https://agentprime.io/advisories/CVE-2025-10528.md)
  `CVE-2025-10528` · CVE record: Mozilla Firefox and 1 more · CVSS 7.3 High · Not analysed yet · Published 16 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2025-43330.md)
  `CVE-2025-43330` · CVE record: Apple macOS · CVSS 8.2 High · Not analysed yet · Published 15 Sept 2025 · Tags: CWE-693
- [Picklescan Bypass is Possible via File Extension Mismatch](https://agentprime.io/advisories/GHSA-jgw4-cr84-mqxg.md)
  `GHSA-jgw4-cr84-mqxg`, `CVE-2025-10155`, `PYSEC-2025-151` · PyPI `picklescan`: affected `<0.0.31`, fixed in `0.0.31` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2025 · Tags: CWE-20, CWE-693
- [Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check](https://agentprime.io/advisories/GHSA-mjqp-26hc-grxg.md)
  `GHSA-mjqp-26hc-grxg`, `CVE-2025-10156`, `PYSEC-2025-152` · PyPI `picklescan`: affected `<0.0.31`, fixed in `0.0.31` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2025 · Tags: CWE-693, CWE-755
- [Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports](https://agentprime.io/advisories/GHSA-f7qq-56ww-84cr.md)
  `GHSA-f7qq-56ww-84cr`, `CVE-2025-10157`, `PYSEC-2025-153` · PyPI `picklescan`: affected `<0.0.31`, fixed in `0.0.31` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Sept 2025 · Tags: CWE-693
- [MapUrlToZone Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2025-54917.md)
  `CVE-2025-54917` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Microsoft Windows](https://agentprime.io/advisories/CVE-2025-59033.md)
  `CVE-2025-59033` · CVE record: Microsoft Windows · CVSS 7.4 High · Not analysed yet · Published 8 Sept 2025 · Tags: CWE-420, CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-26439.md)
  `CVE-2025-26439` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-26431.md)
  `CVE-2025-26431` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48554.md)
  `CVE-2025-48554` · CVE record: Google Android · CVSS 6.1 Medium · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48546.md)
  `CVE-2025-48546` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48534.md)
  `CVE-2025-48534` · CVE record: Google Android · CVSS 8.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48531.md)
  `CVE-2025-48531` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-48522.md)
  `CVE-2025-48522` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-32331.md)
  `CVE-2025-32331` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-26464.md)
  `CVE-2025-26464` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-0089.md)
  `CVE-2025-0089` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-26458.md)
  `CVE-2025-26458` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-26443.md)
  `CVE-2025-26443` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-26444.md)
  `CVE-2025-26444` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-36905.md)
  `CVE-2025-36905` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-36898.md)
  `CVE-2025-36898` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 4 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Chrome](https://agentprime.io/advisories/CVE-2025-9866.md)
  `CVE-2025-9866` · CVE record: Google Chrome · CVSS 8.8 High · Not analysed yet · Published 3 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22437.md)
  `CVE-2025-22437` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22434.md)
  `CVE-2025-22434` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22433.md)
  `CVE-2025-22433` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22431.md)
  `CVE-2025-22431` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22429.md)
  `CVE-2025-22429` · CVE record: Google Android · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2025-22427.md)
  `CVE-2025-22427` · CVE record: Google Android · CVSS 7.3 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693
- [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2024-49720.md)
  `CVE-2024-49720` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 2 Sept 2025 · Tags: CWE-693

Newest: <https://agentprime.io/advisories/tag/cwe-693.md>
Older: <https://agentprime.io/advisories/tag/cwe-693.md?cursor=WyIyMDI1LTA5LTAyVDIyOjExOjA0LjU0NzAwMFoiLCJDVkUtMjAyNC00OTcyMCJd>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-693&cursor=WyIyMDI1LTEyLTExVDE5OjM1OjUxLjQzMjAwMFoiLCJDVkUtMjAyNS0zNjkzOCJd>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-693/?cursor=WyIyMDI1LTEyLTExVDE5OjM1OjUxLjQzMjAwMFoiLCJDVkUtMjAyNS0zNjkzOCJd>. Everything for agents: <https://agentprime.io/llms.txt>.