# CWE-693. Every Advisory and CVE whose sources give the weakness CWE-693, newest first. ## Records, newest first (an older page) - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-55304.md) `CVE-2026-55304` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-55302.md) `CVE-2026-55302` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0189.md) `CVE-2026-0189` · CVE record: Google Android · CVSS 8.4 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0187.md) `CVE-2026-0187` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0186.md) `CVE-2026-0186` · CVE record: Google Android · CVSS 6.7 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass](https://agentprime.io/advisories/CVE-2026-91949.md) `CVE-2026-91949` · CVE record: FreeRDP FreeRDP · CVSS 9.2 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the Widget: Win32 component](https://agentprime.io/advisories/CVE-2026-92079.md) `CVE-2026-92079` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the Networking component](https://agentprime.io/advisories/CVE-2026-92075.md) `CVE-2026-92075` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the Popup Blocker component](https://agentprime.io/advisories/CVE-2026-92074.md) `CVE-2026-92074` · CVE record: Mozilla Firefox and 1 more · CVSS 8.8 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Sandbox escape in the Profile Backup component](https://agentprime.io/advisories/CVE-2026-92066.md) `CVE-2026-92066` · CVE record: Mozilla Firefox and 1 more · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the Enterprise Policies component](https://agentprime.io/advisories/CVE-2026-92057.md) `CVE-2026-92057` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the DOM: Networking component](https://agentprime.io/advisories/CVE-2026-92041.md) `CVE-2026-92041` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the DOM: Notifications component](https://agentprime.io/advisories/CVE-2026-92039.md) `CVE-2026-92039` · CVE record: Mozilla Firefox and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the Remote Settings Client component](https://agentprime.io/advisories/CVE-2026-92038.md) `CVE-2026-92038` · CVE record: Mozilla Firefox and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component](https://agentprime.io/advisories/CVE-2026-92030.md) `CVE-2026-92030` · CVE record: Mozilla Firefox and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Mitigation bypass in the Remote Settings Client component](https://agentprime.io/advisories/CVE-2026-92019.md) `CVE-2026-92019` · CVE record: Mozilla Firefox and 1 more · CVSS 8.1 High · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Sandbox escape in the DOM: Core & HTML component](https://agentprime.io/advisories/CVE-2026-92018.md) `CVE-2026-92018` · CVE record: Mozilla Firefox and 1 more · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 15 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-84559.md) `CVE-2026-84559` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-86909.md) `CVE-2026-86909` · CVE record: Apple macOS · CVSS 4.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-84578.md) `CVE-2026-84578` · CVE record: Apple macOS · CVSS 8.8 High · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-86894.md) `CVE-2026-86894` · CVE record: Apple macOS · CVSS 7.5 High · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-28899.md) `CVE-2026-28899` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-43787.md) `CVE-2026-43787` · CVE record: Apple macOS · CVSS 5.9 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-84570.md) `CVE-2026-84570` · CVE record: Apple macOS · CVSS 4.4 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple iOS and iPadOS and others](https://agentprime.io/advisories/CVE-2026-65406.md) `CVE-2026-65406` · CVE record: Apple iOS and iPadOS and 3 more · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Apple macOS](https://agentprime.io/advisories/CVE-2026-65369.md) `CVE-2026-65369` · CVE record: Apple macOS · CVSS 5.5 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: CWE-693 - [MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Pictures](https://agentprime.io/advisories/CVE-2026-90957.md) `CVE-2026-90957` · CVE record: MISP MISP · CVSS 5.1 Medium · Not analysed yet · Published 14 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-693 - [Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards](https://agentprime.io/advisories/CVE-2026-76059.md) `CVE-2026-76059` · CVE record: IBM Langflow OSS · CVSS 8.8 High · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-693 - [Suricata lua: excessive flow variable registration can bypass sandbox](https://agentprime.io/advisories/CVE-2026-45770.md) `CVE-2026-45770` · CVE record: OISF suricata · CVSS 7.5 High · Not analysed yet · Published 10 Sept 2026 · Tags: Memory corruption, CWE-693 - [Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows](https://agentprime.io/advisories/CVE-2026-0306.md) `CVE-2026-0306` · CVE record: Palo Alto Networks Prisma Access Agent · CVSS 5.8 Medium · Not analysed yet · Published 10 Sept 2026 · Tags: CWE-693 - [NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover](https://agentprime.io/advisories/CVE-2026-54694.md) `CVE-2026-54694` · CVE record: NationalSecurityAgency skills-service · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 9 Sept 2026 · Tags: Cross-site scripting (XSS), CWE-20, CWE-116, CWE-183 - [Protection mechanism failure in Dell Secure Connect Gateway 5.0 - Application and others](https://agentprime.io/advisories/CVE-2026-79638.md) `CVE-2026-79638` · CVE record: Dell Secure Connect Gateway 5.0 - Application and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-693 - [SiYuan before v3.8.2 Read-Only Boundary Bypass via fullTextSearchBlock](https://agentprime.io/advisories/CVE-2026-87808.md) `CVE-2026-87808` · CVE record: siyuan-note siyuan · CVSS 8.7 High · Not analysed yet · Published 9 Sept 2026 · Tags: CWE-693 - [Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-gh2h-rhph-h37g.md) `GHSA-gh2h-rhph-h37g`, `BIT-dotnet-2026-50646`, `BIT-dotnet-sdk-2026-50646`, `CVE-2026-50646` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10`, fixed in `8.0.29`, `9.0.18`, `10.0.10` · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization, CWE-693 - [Validation Bypass in Okta Access Gateway Custom Directives](https://agentprime.io/advisories/CVE-2026-78552.md) `CVE-2026-78552` · CVE record: Okta Okta Access Gateway · CVSS 6.0 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-49881.md) `CVE-2026-49881` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-45521.md) `CVE-2026-45521` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28668.md) `CVE-2026-28668` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28664.md) `CVE-2026-28664` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28660.md) `CVE-2026-28660` · CVE record: Google Android · CVSS 3.3 Low · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28658.md) `CVE-2026-28658` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28655.md) `CVE-2026-28655` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28650.md) `CVE-2026-28650` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28642.md) `CVE-2026-28642` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28639.md) `CVE-2026-28639` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28634.md) `CVE-2026-28634` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28627.md) `CVE-2026-28627` · CVE record: Google Android · CVSS 4.3 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28612.md) `CVE-2026-28612` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28599.md) `CVE-2026-28599` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28594.md) `CVE-2026-28594` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28584.md) `CVE-2026-28584` · CVE record: Google Android · CVSS 5.5 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-28583.md) `CVE-2026-28583` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: Memory corruption, CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0084.md) `CVE-2026-0084` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Protection mechanism failure in Google Android](https://agentprime.io/advisories/CVE-2026-0065.md) `CVE-2026-0065` · CVE record: Google Android · CVSS 7.8 High · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [Visual Studio Code Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2026-81376.md) `CVE-2026-81376` · CVE record: Microsoft Visual Studio Code · CVSS 9.6 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693, CWE-1023 - [Windows Boot Manager Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2026-77892.md) `CVE-2026-77892` · CVE record: Microsoft Windows 10 Version 1607 and 4 more · CVSS 6.8 Medium · Not analysed yet · Published 8 Sept 2026 · Tags: CWE-693 - [NLTK: Allowlisted pickle loaders still permit code execution in current source](https://agentprime.io/advisories/GHSA-x99w-6fgc-pmfw.md) `GHSA-x99w-6fgc-pmfw`, `CVE-2026-79657`, `PYSEC-2026-3735` · PyPI `nltk`: affected `<3.10.3`, fixed in `3.10.3` · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 8 Sept 2026 · Tags: Insecure deserialization, CWE-693 - [agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode](https://agentprime.io/advisories/CVE-2026-84811.md) `CVE-2026-84811` · CVE record: agentverus agentverus-scanner · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-693 - [claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan](https://agentprime.io/advisories/CVE-2026-84810.md) `CVE-2026-84810` · CVE record: claude-world claude-skill-antivirus · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-693 - [Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode](https://agentprime.io/advisories/CVE-2026-84809.md) `CVE-2026-84809` · CVE record: Tencent AI-Infra-Guard and 1 more · CVSS 7.1 High · Not analysed yet · Published 2 Sept 2026 · Tags: CWE-693 Newest: Older: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .