CWE-693: Protection Mechanism Failure

15 results · Clear filters · Feed

• High 8.8
  CVE-2026-58704 Exploited

  In Cellular Modem, there is a possible permission bypass due to a logic error in the code. This could lead to remote (p…

  Google Android Android
  Sep 15, 2026

  KEV Sep 16, 2026
• Medium 4.3
  CVE-2026-32202 Exploited Public exploit EPSS 71%

  Windows Shell Spoofing Vulnerability

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to perform spoofing over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows Alpine
  Apr 14, 2026

  KEV Apr 28, 2026
• High 8.8
  CVE-2026-21510 Exploited Public exploit EPSS 61%

  Windows Shell Security Feature Bypass Vulnerability

  Protection mechanism failure in Windows Shell allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• High 8.8
  CVE-2026-21513 Exploited EPSS 16%

  MSHTML Framework Security Feature Bypass Vulnerability

  Protection mechanism failure in MSHTML Framework allows an unauthorized attacker to bypass a security feature over a network.

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 10, 2026

  KEV Feb 10, 2026
• High 8.1
  CVE-2025-40536 Exploited Public exploit EPSS 74%

  SolarWinds Web Help Desk Security Control Bypass Vulnerability

  SolarWinds Web Help Desk was found to be susceptible to a security control bypass vulnerability that if exploited, could allow an unauthenticated attacker to gain access to certain restricted functionality.

  SolarWinds Web Help Desk
  Jan 28, 2026

  KEV Feb 12, 2026
• High 7.0
  CVE-2025-0411 Exploited Public exploit EPSS 48%

  7-Zip Mark-of-the-Web Bypass Vulnerability

  7-Zip Mark-of-the-Web Bypass Vulnerability. This vulnerability allows remote attackers to bypass the Mark-of-the-Web protection mechanism on affected installations of 7-Zip. User interaction is required to exploit this vulnerability in that the target must vi…

  7-Zip 7-Zip
  Jan 25, 2025

  KEV Feb 6, 2025
• High 7.3
  CVE-2024-38226 Exploited

  Microsoft Publisher Security Feature Bypass Vulnerability

  Microsoft Publisher Security Feature Bypass Vulnerability

  Microsoft Microsoft Office LTSC 2021 Microsoft Office 2019 Microsoft Publisher 2016
  Sep 10, 2024

  KEV Sep 10, 2024
• Medium 5.4
  CVE-2024-38217 Exploited EPSS 10%

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Sep 10, 2024

  KEV Sep 10, 2024
• Medium 6.5
  CVE-2024-38213 Exploited EPSS 14%

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Windows Mark of the Web Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Aug 13, 2024

  KEV Aug 13, 2024
• High 8.8
  CVE-2024-29988 Exploited Public exploit EPSS 45%

  SmartScreen Prompt Security Feature Bypass Vulnerability

  SmartScreen Prompt Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Apr 9, 2024

  KEV Apr 30, 2024
• High 8.1
  CVE-2024-21412 Exploited · Ransomware Public exploit EPSS 99%

  Internet Shortcut Files Security Feature Bypass Vulnerability

  Internet Shortcut Files Security Feature Bypass Vulnerability

  Microsoft Windows Server 2019 Windows Server 2019 (Server Core installation) Windows 10 Version 1809 Windows
  Feb 13, 2024

  KEV Feb 13, 2024
• Critical 9.9
  CVE-2019-1003029 Exploited Public exploit EPSS 74%

  Sandbox bypass in Script Security Plugin

  A sandbox bypass vulnerability exists in Jenkins Script Security Plugin 1.53 and earlier in src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/GroovySandbox.java, src/main/java/org/jenkinsci/plugins/scriptsecurity/sandbox/groovy/SecureGroovyScr…

  Jenkins Project Jenkins Script Security Plugin org.jenkins-ci.plugins:script-security Web / CMS Maven
  Mar 8, 2019

  KEV Apr 25, 2022
• Critical 9.9
  CVE-2019-1003030 Exploited Public exploit EPSS 97%

  Sandbox bypass in Jenkins Pipeline: Groovy Plugin

  A sandbox bypass vulnerability exists in Jenkins Pipeline: Groovy Plugin 2.63 and earlier in pom.xml, src/main/java/org/jenkinsci/plugins/workflow/cps/CpsGroovyShell.java that allows attackers able to control pipeline scripts to execute arbitrary code on the …

  Jenkins Project Jenkins Pipeline: Groovy Plugin org.jenkins-ci.plugins.workflow:workflow-cps Web / CMS Maven
  Mar 8, 2019

  KEV Mar 25, 2022
• Critical 9.8
  CVE-2013-2465 Exploited · Ransomware Public exploit EPSS 99%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 Update 21 and earlier, 6 …

  Jun 18, 2013

  KEV Mar 28, 2022
• Low 3.7
  CVE-2013-0431 Exploited · Ransomware Public exploit EPSS 90%

  Unspecified vulnerability in the Java Runtime Environment (JRE) component in Oracle Java SE 7 through Update 11, and Op…

  Jan 31, 2013

  KEV May 25, 2022