Advisories · Weakness

CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

CVE-2025-55002 CVE record

CVSS 5.5 Medium

JupyterLab Desktop: TCC Bypass via Misconfigured Node Fuses
- jupyterlab-desktop
- Code injection
- Privilege escalation
Not analysed yet 6 Nov 2026
CVE-2025-54991 CVE record

CVSS 5.5 Medium

JupyterLab Desktop: TCC Bypass via Insecure Entitlements (macOS)
- jupyterlab-desktop
- Privilege escalation
- CWE-693
Not analysed yet 6 Nov 2026
CVE-2026-119170 CVE record

CVSS 8.2 High

Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10
- Python Software Foundation CPython
- CWE-693
Not analysed yet 6 Nov 2026
CVE-2026-83494 CVE record

Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug)
- Red Hat OpenShift AI (RHOAI)
- CWE-693
Not analysed yet 6 Nov 2026
CVE-2026-103863 CVE record

Apache Sling Engine: Include-protection mitigations bypassable via uncovered response-wrapper paths
- Apache Software Foundation Apache Sling Engine
- Cross-site scripting (XSS)
- CWE-693
Not analysed yet 5 Nov 2026
CVE-2026-105991 CVE record

CVSS 3.5 Low

Multiple vulnerabilities that affects IBM Db2 Genius Hub
- IBM Db2 Genius Hub
- CWE-693
Not analysed yet 4 Nov 2026
CVE-2026-108588 CVE record

CVSS 5.4 Medium

Multiple vulnerabilities that affects IBM Db2 Genius Hub
- IBM Db2 Genius Hub
- CWE-693
Not analysed yet 4 Nov 2026
CVE-2026-102704 CVE record

CVSS 4.4 Medium

arbitrary read/write via grant copy
- Xen
- CWE-693
Not analysed yet 4 Nov 2026
CVE-2026-93325 CVE record

CVSS 7.3 High

Bake filesystem entitlement consent is skipped under --progress=rawjson in Docker Buildx
- Docker Buildx
- CWE-693
Not analysed yet 3 Nov 2026
@enspirit/elo npm

CVSS 9.8 CriticalCritical · CVSS 9+

Elo JavaScript emitter has sandbox escape to arbitrary Node.js / browser code execution via unfiltered `.constructor` member access
- Cross-site scripting (XSS)
- Code injection
<1.0.1 · fixed in 1.0.1

GHSA-33r5-xmm8-v6x5 · CVE-2026-44267 Not analysed yet 3 Nov 2026
CVE-2026-59031 CVE record

CVSS 6.2 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-59002 CVE record

CVSS 2.4 Low

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58979 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58978 CVE record

CVSS 6.8 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58961 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58956 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58946 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58934 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58883 CVE record

CVSS 7.5 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58847 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58837 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-58836 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-49912 CVE record

CVSS 4.0 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-45514 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-28645 CVE record

CVSS 6.8 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-28632 CVE record

CVSS 4.0 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Nov 2026
CVE-2026-87718 CVE record

CVSS 2.3 Low

Apache Wicket: CSP headers silently omitted for pages served through nested request handler delegates
- Apache Software Foundation Apache Wicket
- CWE-693
Not analysed yet 1 Nov 2026
CVE-2026-120338 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Prefab UI Pyodide sandbox escape to host RCE
- PrefectHQ prefab-ui
- Code injection
- Privilege escalation
Not analysed yet 1 Nov 2026
CVE-2026-120202 CVE record

CVSS 7.1 High

Highflame ramparts 0.8.1 through 0.8.10 Skill Bundle Scan Bypass via Nested .pyc
- highflame-ai ramparts
- CWE-693
Not analysed yet 31 Oct 2026
CVE-2026-16760 CVE record

CVSS 8.8 High

Fickling check_safety() bypass: likely_safe_imports grants module-origin trust to unvalidated standard library callables
- trailofbits fickling
- Insecure deserialization
- CWE-693
Not analysed yet 30 Oct 2026
CVE-2026-112348 CVE record

CVSS 6.9 Medium

Kirki WordPress Plugin < 6.2.5 reCAPTCHA Bypass via Missing Token
- Themeum Kirki
- CWE-693
Not analysed yet 30 Oct 2026
praisonai PyPI

CVSS 7.0 High

PraisonAI vulnerable to Remote Code Execution via Broken AST Sandbox
- Command injection
- CWE-184
<4.6.78 · fixed in 4.6.78

GHSA-26mh-57q7-jfvr · CVE-2026-61438 Not analysed yet 29 Oct 2026
CVE-2026-110182 CVE record

CVSS 4.3 Medium

PostgreSQL Anonymizer: anon.partial() and anon.partial_email() can reveal the whole data
- DALIBO PostgreSQL Anonymizer
- CWE-693
Not analysed yet 28 Oct 2026
CVE-2026-110181 CVE record

CVSS 6.5 Medium

PostgreSQL Anonymizer: Function declared with SQL-standard syntax leak anonymized data
- DALIBO PostgreSQL Anonymizer
- CWE-693
Not analysed yet 28 Oct 2026
CVE-2026-87878 CVE record

CVSS 6.3 Medium

Protection mechanism failure in Acronis Cyber Protect 17
- Acronis Cyber Protect 17
- CWE-693
Not analysed yet 28 Oct 2026
CVE-2026-87100 CVE record

CVSS 3.6 Low

Protection mechanism failure in Acronis Cyber Protect 17
- Acronis Cyber Protect 17
- CWE-693
Not analysed yet 28 Oct 2026
authlib PyPI

CVSS 2.6 Low

Authlib: is_secure_transport() loopback exemption can be bypassed with a userinfo component, allowing cleartext-HTTP URLs to non-loopback hosts
- Weak cryptography or TLS
- Open redirect
<1.8.0 · fixed in 1.8.0

GHSA-jj7h-c3hg-m23x · CVE-2026-114614 Not analysed yet 27 Oct 2026
CVE-2026-117998 CVE record

CVSS 8.8 High

Mitigation bypass in the DOM: Push Subscriptions component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 27 Oct 2026
CVE-2026-117967 CVE record

CVSS 8.8 High

Mitigation bypass in the DOM: Security component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 27 Oct 2026
CVE-2026-117868 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Sandbox escape in the DOM: Networking component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 27 Oct 2026
CVE-2026-117864 CVE record

CVSS 8.8 High

Sandbox escape in the Form Manager component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 27 Oct 2026
CVE-2026-117861 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Sandbox escape in the DOM: Navigation component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 27 Oct 2026
CVE-2026-65327 CVE record

CVSS 8.4 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112568 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112437 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112498 CVE record

CVSS 8.2 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-113952 CVE record

CVSS 5.4 Medium

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112523 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112534 CVE record

CVSS 8.2 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-86937 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112428 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-86936 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112541 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112668 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112434 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-112530 CVE record

CVSS 7.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-113897 CVE record

CVSS 10.0 CriticalCritical · CVSS 9+

Protection mechanism failure in Apple Safari and others
- Apple Safari
- Apple iOS and iPadOS
- CWE-693
Not analysed yet 26 Oct 2026
CVE-2026-116145 CVE record

CVSS 1.8 Low

ImageMagick before 6.9.13-58 and 7.x before 7.1.2-32 Security Policy Bypass via Incomplete Fix
- ImageMagick
- CWE-693
Not analysed yet 25 Oct 2026
CVE-2026-115480 CVE record

CVSS 5.3 Medium

baserCMS: Public Web API mail-form submission bypasses image CAPTCHA
- baserproject basercms
- CWE-693
- CWE-799
Not analysed yet 23 Oct 2026
CVE-2026-111965 CVE record

CVSS 4.3 Medium

Profile Builder 4.0.0 - 4.0.4 - Subscriber+ Comment reCAPTCHA Bypass
- Profile Builder
- CWE-693
Not analysed yet 23 Oct 2026