CWE-693.

Cisco Nexus Dashboard Fabric Controller Unauthorized REST API Vulnerability

• Cisco Data Center Network Manager
• CWE-693

Protection mechanism failure in Dell ThinOS 10

• Dell ThinOS 10
• CWE-693

Picklescan has a missing detection when calling built-in python trace.Trace.runctx

• CWE-693

<0.0.29 · fixed in 0.0.29

Sandboxed iframes could allow local downloads despite sandbox restrictions

• Mozilla Firefox for iOS
• CWE-693

A vulnerability exists in riscv-boom SonicBOOM 1.2 (BOOMv1.2) processor implementation, where valid virtual-to-physical address translations configured with write permissions (PTE_W) in SV39 mode may…

• Broken access control
• Unrestricted file upload

Protection mechanism failure in Intel(R) Arc(TM) B-Series graphics

• Intel(R) Arc(TM) B-Series graphics
• CWE-693

Protection mechanism failure in Edge Orchestrator software

• Edge Orchestrator software
• CWE-693

SMM IDT Privilege Escalation Vulnerability

• TianoCore EDK2
• CWE-693

Kenwood DMX958XR Protection Mechanism Failure Software Downgrade Vulnerability

• Kenwood DMX958XR
• CWE-693

Protection mechanism failure in Apple macOS

• Apple macOS
• CWE-693

Protection mechanism failure in Apple macOS

• Apple macOS
• CWE-693

XSLT documents could bypass CSP

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Junos OS: IPv6 firewall filter fails to match payload-protocol

• Juniper Networks Junos OS
• CWE-693

Emerson ValveLink Products Protection Mechanism Failure

• Emerson ValveLink SOLO
• Emerson ValveLink DTM
• CWE-693

Contrast vulnerability allows arbitrary host data Injection into container VOLUME mount points

• Information disclosure
• CWE-693

<1.9.1 · fixed in 1.9.1

Windows SmartScreen Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Windows BitLocker Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Windows BitLocker Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• CWE-693

Windows GDI Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Protection mechanism failure in Siemens RUGGEDCOM RMC8388 V5.X and others

• Siemens RUGGEDCOM RMC8388 V5.X
• Siemens RUGGEDCOM RMC8388NC V5.X
• CWE-693

connect-src Content Security Policy restriction could be bypassed

• Mozilla Firefox
• Mozilla Thunderbird
• CWE-693

Missing HTTP Security Headers

• SICK AG Field Analytics
• SICK AG Media Server
• CWE-693

DHCP Server Service Denial of Service Vulnerability

• Microsoft Windows Server 2016
• Microsoft Windows Server 2016 (Server Core installation)
• CWE-693

DHCP Server Service Denial of Service Vulnerability

• Microsoft Windows Server 2016
• Microsoft Windows Server 2016 (Server Core installation)
• CWE-693

Windows Shortcut Files Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Protection mechanism failure in Apple macOS

• Apple macOS
• CWE-693

Protection mechanism failure in Google Android

• Google Android
• CWE-693

Spring Security authorization bypass for method security annotations on private methods

• CWE-693

>=6.4.0, <6.4.6 · fixed in 6.4.6

Protection mechanism failure in Edge Orchestrator software for Intel(R) Tiber™ Edge Platform

• Edge Orchestrator software for Intel(R) Tiber™ Edge Platform
• CWE-693

Protection mechanism failure in Apple macOS

• Apple macOS
• CWE-693

Protection mechanism failure in Apple macOS

• Apple macOS
• CWE-693

@misskey-dev/summaly Redirect Filter Bypass

• Open redirect
• CWE-665

>=3.0.1, <5.2.1 · fixed in 5.2.1

uTLS ServerHellos are accepted without checking TLS 1.3 downgrade canaries

• CWE-693

<1.7.0 · fixed in 1.7.0

Spotfire Code Execution Vulnerability

• Spotfire Enterprise Runtime for R
• Spotfire Statistics Services
• Code injection
• CWE-693

Windows BitLocker Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Windows Mark of the Web Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows Server 2012
• CWE-693

Azure Health Bot Elevation of Privilege Vulnerability

• Microsoft Azure Health Bot
• CWE-693

Windows Mark of the Web Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Protection mechanism failure in Siemens SIMATIC Field PG M5 and others

• Siemens SIMATIC Field PG M5
• Siemens SIMATIC Field PG M6
• CWE-693

Protection mechanism failure in Siemens SIMATIC Field PG M5 and others

• Siemens SIMATIC Field PG M5
• Siemens SIMATIC IPC BX-21A
• CWE-693

Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923 allows Insufficient Antivirus Protection and thus drivers can have known malicious code OVE-20230524-…

• CWE-693

Hide My WP Ghost – Security & Firewall <= 5.3.02 - Unauthenticated Login Page Disclosure

• johndarrel WP Ghost (Hide My WP Ghost) – Security & Firewall
• CWE-693

7-Zip Mark-of-the-Web Bypass Vulnerability

• 7-Zip
• CWE-693

Union Bank of India Vyom Rooting Detection protection mechanism

• Union Bank of India Vyom
• CWE-693

Windows MapUrlToZone Denial of Service Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• Memory corruption
• CWE-693

Secure Boot Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Windows NTLM Spoofing Vulnerability

• Microsoft Windows 10 Version 1507
• Microsoft Windows 10 Version 1607
• CWE-693

Microsoft Office Security Feature Bypass Vulnerability

• Microsoft 365 Apps for Enterprise
• Microsoft Office 2016
• CWE-693

Denial of Service in Keycloak Server via Security Headers

• CWE-693

<26.0.8 · fixed in 26.0.8

Jinja has a sandbox breakout through indirect reference to format method

• Code injection
• CWE-693

<3.1.5 · fixed in 3.1.5

WinZip Mark-of-the-Web Bypass Vulnerability

• WinZip
• CWE-693

Lock User Account <= 1.0.5 - User Lock Bypass

• babatechs Lock User Account
• CWE-693

Protection mechanism failure in Cisco Firepower Threat Defense Software and others

• Cisco Firepower Threat Defense Software
• Cisco UTD SNORT IPS Engine Software
• CWE-693

Protection mechanism failure in Intel(R) Xeon(R) processor family (E-Core)

• Intel(R) Xeon(R) processor family (E-Core)
• CWE-693

Protection mechanism failure in Intel(R) Processors

• Intel(R) Processors
• CWE-693

Windows Package Library Manager Information Disclosure Vulnerability

• Microsoft Windows Server 2025
• Microsoft Windows Server 2025 (Server Core installation)
• CWE-693

Windows Defender Application Control (WDAC) Security Feature Bypass Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows Server 2019
• CWE-693

Nix allows macOS sandbox escape via built-in builders

• nix
• CWE-693

Protection mechanism failure in Apple iOS and iPadOS and others

• Apple iOS and iPadOS
• Apple macOS
• CWE-693