Advisories · Weakness

CWE-693.

Every Advisory and CVE whose sources give the weakness CWE-693, newest first.

CVE-2026-55304 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-55302 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-0189 CVE record

CVSS 8.4 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-0187 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-0186 CVE record

CVSS 6.7 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-91949 CVE record

CVSS 9.2 CriticalCritical · CVSS 9+

FreeRDP 3.0.0 through 3.30.0 Protocol Negotiation Bypass
- FreeRDP
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92079 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Mitigation bypass in the Widget: Win32 component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92075 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Mitigation bypass in the Networking component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92074 CVE record

CVSS 8.8 High

Mitigation bypass in the Popup Blocker component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92066 CVE record

CVSS 9.8 CriticalCritical · CVSS 9+

Sandbox escape in the Profile Backup component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92057 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Mitigation bypass in the Enterprise Policies component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92041 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Mitigation bypass in the DOM: Networking component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92039 CVE record

CVSS 6.3 Medium

Mitigation bypass in the DOM: Notifications component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92038 CVE record

CVSS 9.1 CriticalCritical · CVSS 9+

Mitigation bypass in the Remote Settings Client component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92030 CVE record

CVSS 5.4 Medium

Mitigation bypass in the DOM: Copy & Paste and Drag & Drop component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92019 CVE record

CVSS 8.1 High

Mitigation bypass in the Remote Settings Client component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-92018 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Sandbox escape in the DOM: Core & HTML component
- Mozilla Firefox
- Mozilla Thunderbird
- CWE-693
Not analysed yet 15 Sept 2026
CVE-2026-84559 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-86909 CVE record

CVSS 4.4 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-84578 CVE record

CVSS 8.8 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-86894 CVE record

CVSS 7.5 High

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-28899 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-43787 CVE record

CVSS 5.9 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-84570 CVE record

CVSS 4.4 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-65406 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple iOS and iPadOS and others
- Apple iOS and iPadOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-65369 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Apple macOS
- Apple macOS
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-90957 CVE record

CVSS 5.1 Medium

MISP: Stored XSS via Inline-Served SVG Organisation Logos and Report Pictures
- MISP
- Cross-site scripting (XSS)
- CWE-693
Not analysed yet 14 Sept 2026
CVE-2026-76059 CVE record

CVSS 8.8 High

Langflow is vulnerable to arbitrary code execution due to multiple incomplete code security controls and missing execution guards
- IBM Langflow OSS
- CWE-693
Not analysed yet 10 Sept 2026
CVE-2026-45770 CVE record

CVSS 7.5 High

Suricata lua: excessive flow variable registration can bypass sandbox
- OISF suricata
- Memory corruption
- CWE-693
Not analysed yet 10 Sept 2026
CVE-2026-0306 CVE record

CVSS 5.8 Medium

Prisma Access Agent: EndPoint DLP Bypass Vulnerability on Windows
- Palo Alto Networks Prisma Access Agent
- CWE-693
Not analysed yet 10 Sept 2026
CVE-2026-54694 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

NationalSecurityAgency/skills-service has Stored XSS via User Registration Enabling Admin Account Takeover
- NationalSecurityAgency skills-service
- Cross-site scripting (XSS)
- CWE-20
Not analysed yet 9 Sept 2026
CVE-2026-79638 CVE record

CVSS 5.3 Medium

Protection mechanism failure in Dell Secure Connect Gateway 5.0 - Application and others
- Dell Secure Connect Gateway 5.0 - Application
- Dell Secure Connect Gateway 5.0 - Appliance
- CWE-693
Not analysed yet 9 Sept 2026
CVE-2026-87808 CVE record

CVSS 8.7 High

SiYuan before v3.8.2 Read-Only Boundary Bypass via fullTextSearchBlock
- siyuan
- CWE-693
Not analysed yet 9 Sept 2026
Microsoft.WindowsDesktop.App.Runtime.win-arm64 +2 NuGet

CVSS 7.8 High

Microsoft Security Advisory CVE-2026-50646 – .NET Remote Code Execution Vulnerability
- Insecure deserialization
- CWE-693
>=8.0.0, <8.0.29 || >=9.0.0, <9.0.18 || >=10.0.0, <10.0.10 · fixed in 8.0.29, 9.0.18, 10.0.10

GHSA-gh2h-rhph-h37g · CVE-2026-50646 Not analysed yet 8 Sept 2026
CVE-2026-78552 CVE record

CVSS 6.0 Medium

Validation Bypass in Okta Access Gateway Custom Directives
- Okta Access Gateway
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-49881 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-45521 CVE record

CVSS 3.3 Low

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28668 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28664 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28660 CVE record

CVSS 3.3 Low

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28658 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28655 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28650 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28642 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28639 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28634 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28627 CVE record

CVSS 4.3 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28612 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28599 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28594 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28584 CVE record

CVSS 5.5 Medium

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-28583 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- Memory corruption
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-0084 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-0065 CVE record

CVSS 7.8 High

Protection mechanism failure in Google Android
- Google Android
- CWE-693
Not analysed yet 8 Sept 2026
CVE-2026-81376 CVE record

CVSS 9.6 CriticalCritical · CVSS 9+

Visual Studio Code Security Feature Bypass Vulnerability
- Microsoft Visual Studio Code
- CWE-693
- CWE-1023
Not analysed yet 8 Sept 2026
CVE-2026-77892 CVE record

CVSS 6.8 Medium

Windows Boot Manager Elevation of Privilege Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-693
Not analysed yet 8 Sept 2026
nltk PyPI

CVSS 9.3 CriticalCritical · CVSS 9+

NLTK: Allowlisted pickle loaders still permit code execution in current source
- Insecure deserialization
- CWE-693
<3.10.3 · fixed in 3.10.3

GHSA-x99w-6fgc-pmfw · CVE-2026-79657 Not analysed yet 8 Sept 2026
CVE-2026-84811 CVE record

CVSS 7.1 High

agentverus-scanner Companion Code Analysis Bypass via Excluded Python Bytecode
- agentverus-scanner
- CWE-693
Not analysed yet 2 Sept 2026
CVE-2026-84810 CVE record

CVSS 7.1 High

claude-skill-antivirus Analysis Bypass via Manifest-Only Local Directory Scan
- claude-world claude-skill-antivirus
- CWE-693
Not analysed yet 2 Sept 2026
CVE-2026-84809 CVE record

CVSS 7.1 High

Tencent AI-Infra-Guard skill-scan Analysis Bypass via Excluded Python Bytecode
- Tencent AI-Infra-Guard
- Tencent aig-skill-scan
- CWE-693
Not analysed yet 2 Sept 2026