Advisories · Weakness

CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

CVE-2025-67460 CVE record

CVSS 7.8 High

Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
- Zoom Communications Inc. Zoom Rooms
- CWE-693
Not analysed yet 10 Dec 2025
CVE-2025-34413 CVE record

CVSS 7.1 High

Legality WHISTLEBLOWING Missing Critical HTTP Security Headers
- DigitalPA S.r.l. Legality WHISTLEBLOWING
- CWE-693
Not analysed yet 9 Dec 2025
mad-proxy PyPI

CVSS 5.3 Medium

HTTP/HTTPS Traffic Interception Bypass in mad-proxy
- CWE-693
<=0.3 · no fixed version yet

GHSA-wx63-35hw-2482 · CVE-2025-67485 Not analysed yet 9 Dec 2025
CVE-2025-66204 CVE record

CVSS 6.3 Medium

WBCE CMS allows brute-force protection bypass using X-Forwarded-For header
- WBCE_CMS
- Authentication bypass
- CWE-693
Not analysed yet 8 Dec 2025
CVE-2025-48626 CVE record

CVSS 8.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Dec 2025
github.com/envoyproxy/envoy Go

CVSS 3.7 Low

Envoy forwards early CONNECT data in TCP proxy mode
- CWE-693
<1.33.13 || >=1.34.0, <1.34.11 || >=1.35.0, <1.35.7 || >=1.36.0, <1.36.3 · fixed in 1.33.13, 1.34.11, 1.35.7, 1.36.3

GHSA-rj35-4m94-77jh · CVE-2025-64763 Not analysed yet 5 Dec 2025
@anthropic-ai/sandbox-runtime npm

CVSS 1.8 Low

Anthropic Sandbox Runtime Incorrectly Implemented Network Sandboxing
- CWE-693
<0.0.16 · fixed in 0.0.16

GHSA-9gqj-5w7c-vx47 · CVE-2025-66479 Not analysed yet 4 Dec 2025
CVE-2025-29864 CVE record

CVSS 6.2 Medium

Protection mechanism failure in ESTsoft ALZip
- ESTsoft ALZip
- CWE-693
Not analysed yet 3 Dec 2025
CVE-2025-65100 CVE record

CVSS 6.9 Medium

Security Snapshot May Use Unintended Timestamp When Only ISAR_APT_SNAPSHOT_DATE Is Set
- ilbers isar
- CWE-693
Not analysed yet 19 Nov 2025
CVE-2025-11260 CVE record

CVSS 5.3 Medium

WP Headless CMS Framework <= 1.15 - Unauthenticated Protection Mechanism Bypass
- benmoody WP Headless CMS Framework
- CWE-693
Not analysed yet 13 Nov 2025
CVE-2025-62453 CVE record

CVSS 5.0 Medium

GitHub Copilot and Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-693
- CWE-1426
Not analysed yet 11 Nov 2025
CVE-2025-35968 CVE record

CVSS 7.1 High

Protection mechanism failure in Slim Bootloader
- Slim Bootloader
- CWE-693
Not analysed yet 11 Nov 2025
CVE-2025-26402 CVE record

CVSS 6.8 Medium

Protection mechanism failure in Intel(R) NPU Drivers
- Intel(R) NPU Drivers
- CWE-693
Not analysed yet 11 Nov 2025
CVE-2025-24848 CVE record

CVSS 5.4 Medium

Protection mechanism failure in Intel(R) CIP software
- Intel(R) CIP software
- CWE-693
Not analysed yet 11 Nov 2025
CVE-2025-24834 CVE record

CVSS 6.0 Medium

Protection mechanism failure in Intel(R) CIP software
- Intel(R) CIP software
- CWE-693
Not analysed yet 11 Nov 2025
CVE-2025-10905 CVE record

CVSS 4.4 Medium

Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection
- Avast Free Antivirus
- CWE-693
Not analysed yet 11 Nov 2025
CVE-2025-12909 CVE record

CVSS 5.3 Medium

Protection mechanism failure in Google Chrome
- Google Chrome
- CWE-693
Not analysed yet 7 Nov 2025
CVE-2025-12906 CVE record

CVSS 5.4 Medium

Protection mechanism failure in Google Chrome
- Google Chrome
- CWE-693
Not analysed yet 7 Nov 2025
io.github.ascopes:protobuf-maven-plugin Maven

CVSS 4.0, no score published

Protobuf Maven Plugin protocDigest is ignored when using protoc from PATH
- CWE-354
- CWE-693
>=4.0.0, <4.0.2 || <3.10.2 · fixed in 4.0.2, 3.10.2

GHSA-j2pc-v64r-mv4f Not analysed yet 4 Nov 2025
CVE-2025-43413 CVE record

CVSS 7.5 High

Protection mechanism failure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- Broken access control
- CWE-693
Not analysed yet 4 Nov 2025
CVE-2025-60711 CVE record

CVSS 6.3 Medium

Microsoft Edge (Chromium-based) Remote Code Execution Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-693
Not analysed yet 31 Oct 2025
CVE-2025-12554 CVE record

CVSS 6.9 Medium

Missing Security Headers
- Azure Access Technology BLU-IC2
- Azure Access Technology BLU-IC4
- CWE-693
Not analysed yet 31 Oct 2025
CVE-2025-12094 CVE record

CVSS 5.3 Medium

OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA) <= 1.2.53 - Unauthenticated IP Header Spoofing
- OOPSpam Anti-Spam: Spam Protection for WordPress Forms & Comments (No CAPTCHA)
- CWE-693
Not analysed yet 31 Oct 2025
CVE-2025-0277 CVE record

CVSS 6.5 Medium

HCL BigFix Mobile is affected by an insecure Content Security Policy (CSP)
- HCL Software BigFix Mobile
- Cross-site scripting (XSS)
- CWE-693
Not analysed yet 16 Oct 2025
CVE-2025-0276 CVE record

CVSS 6.5 Medium

HCL BigFix Modern Client Management (MCM) is affected by an insecure Content Security Policy (CSP)
- HCL Software BigFix Modern Client Management
- Cross-site scripting (XSS)
- CWE-693
Not analysed yet 16 Oct 2025
CVE-2025-52615 CVE record

CVSS 3.5 Low

HCL Unica Platform is impacted by misconfigured security related HTTP headers
- HCL Software Unica Platform
- CWE-693
Not analysed yet 12 Oct 2025
CVE-2025-43296 CVE record

CVSS 5.5 Medium

Cross-site request forgery in Apple macOS
- Apple macOS
- Cross-site request forgery (CSRF)
- CWE-693
Not analysed yet 9 Oct 2025
CVE-2025-55886 CVE record

CVSS 6.5 Medium

An Insecure Direct Object Reference (IDOR) vulnerability was discovered in ARD.
- CWE-693
Not analysed yet 22 Sept 2025
picklescan PyPI

CVSS 4.0, no score published

Duplicate Advisory: Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
- CWE-693
<0.0.31 · fixed in 0.0.31

GHSA-hf6h-9wq7-hmjg Withdrawn Not analysed yet 17 Sept 2025
CVE-2025-37124 CVE record

CVSS 8.6 High

Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface
- Hewlett Packard Enterprise (HPE) HPE Aruba Networking EdgeConnect SD-WAN Gateway
- CWE-693
Not analysed yet 16 Sept 2025
CVE-2025-10528 CVE record

CVSS 7.3 High

Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 16 Sept 2025
CVE-2025-43330 CVE record

CVSS 8.2 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 15 Sept 2025
picklescan PyPI

CVSS 9.3 CriticalCritical · CVSS 9+

Picklescan Bypass is Possible via File Extension Mismatch
- CWE-20
- CWE-693
<0.0.31 · fixed in 0.0.31

GHSA-jgw4-cr84-mqxg · CVE-2025-10155 Not analysed yet 10 Sept 2025
picklescan PyPI

CVSS 9.3 CriticalCritical · CVSS 9+

Picklescan: ZIP archive scan bypass is possible through non-exhaustive Cyclic Redundancy Check
- CWE-693
- CWE-755
<0.0.31 · fixed in 0.0.31

GHSA-mjqp-26hc-grxg · CVE-2025-10156 Not analysed yet 10 Sept 2025
picklescan PyPI

CVSS 9.3 CriticalCritical · CVSS 9+

Picklescan is Vulnerable to Unsafe Globals Check Bypass through Subclass Imports
- CWE-693
<0.0.31 · fixed in 0.0.31

GHSA-f7qq-56ww-84cr · CVE-2025-10157 Not analysed yet 10 Sept 2025
CVE-2025-54917 CVE record

CVSS 4.3 Medium

MapUrlToZone Security Feature Bypass Vulnerability
- Microsoft Windows 10 Version 1507
- Microsoft Windows 10 Version 1607
- CWE-693
Not analysed yet 9 Sept 2025
CVE-2025-59033 CVE record

CVSS 7.4 High

Protection mechanism failure in Microsoft Windows
- Microsoft Windows
- CWE-420
- CWE-693
Not analysed yet 8 Sept 2025
CVE-2025-26439 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26431 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48554 CVE record

CVSS 6.1 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48546 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48534 CVE record

CVSS 8.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48531 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-48522 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-32331 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26464 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-0089 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26458 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26443 CVE record

CVSS 7.3 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-26444 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-36905 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-36898 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 4 Sept 2025
CVE-2025-9866 CVE record

CVSS 8.8 High

Protection mechanism failure in Google Chrome
- Google Chrome
- CWE-693
Not analysed yet 3 Sept 2025
CVE-2025-22437 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22434 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22433 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22431 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22429 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2025-22427 CVE record

CVSS 7.3 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025
CVE-2024-49720 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 2 Sept 2025