Skip to content
OpenAdvisories

Weakness (CWE)

CWE-689: Permission Race Condition During Resource Copy

Compound Draft

The product, while copying or cloning a resource, does not set the resource's permissions or access control until the copy is complete, leaving the resource exposed to other spheres while the copy is taking place.

Source: MITRE CWE-689

All Critical High Medium Low Exploited only Public exploit

3 results · Feed

  • Medium 5.1
    CVE-2025-0087 Public exploit

    In onCreate of UninstallerActivity.java, there is a possible way to uninstall a different user's app due to a missing p…

    Google Android Android
  • Medium 5.9
    CVE-2025-40909

    Perl threads have a working directory race condition where file operations may target unintended paths

    Perl threads have a working directory race condition where file operations may target unintended paths. If a directory handle is open at thread creation, the process-wide current working directory is temporarily changed in order to clone that handle for the n…

    perl perl perl perl Debian Ubuntu
  • High 8.8
    CVE-2022-28768

    Local Privilege Escalation in Zoom Client Installer for macOS

    The Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) before version 5.12.6 contains a local privilege escalation vulnerability. A local low-privileged user could exploit this vulnerability during the install process to escalate their p…

    Zoom Video Communications Zoom Client for Meetings Installer for macOS (Standard and for IT Admin) macOS