Weakness (CWE)
CWE-693: Protection Mechanism Failure
The product does not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
Source: MITRE CWE-693
375 results · Clear filters · Feed
-
High 7.8
Zoom Rooms for Windows - Software Downgrade Protection Mechanism Failure
Protection Mechanism Failure of Software Downgrade in Zoom Rooms for Windows before 6.6.0 may allow an unauthenticated user to conduct an escalation of privilege via local access.
-
High 7.1
Legality WHISTLEBLOWING Missing Critical HTTP Security Headers
Legality WHISTLEBLOWING by DigitalPA contains a protection mechanism failure in which critical HTTP security headers are not emitted by default. Affected deployments omit Content-Security-Policy, Referrer-Policy, Permissions-Policy, Cross-Origin-Embedder-Poli…
-
High 8.8
In multiple locations, there is a possible way to launch an application from the background due to a precondition check…
-
High 7.5
An access issue was addressed with additional sandbox restrictions. This issue is fixed in iOS 26.1 and iPadOS 26.1, ma…
-
High 8.6
Unauthenticated Access Vulnerability allows Transit Traffic Misrouting in SD-WAN Edge Interface
A vulnerability in the HPE Aruba Networking SD-WAN Gateways could allow an unauthenticated remote attacker to bypass firewall protections. Successful exploitation could allow an attacker to route potentially harmful traffic through the internal network, leadi…
-
High 7.3
Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component
Sandbox escape due to undefined behavior, invalid pointer in the Graphics: Canvas2D component. This vulnerability was fixed in Firefox 143, Firefox ESR 140.3, Thunderbird 143, and Thunderbird 140.3.
-
High 8.2
This issue was addressed by removing the vulnerable code. This issue is fixed in macOS Sequoia 15.7, macOS Tahoe 26. An…
-
High 7.4
The Microsoft vulnerable driver block list is implemented as Windows Defender Application Control (WDAC) policy. Entrie…
-
High 7.8
In getComponentName of AccessibilitySettingsUtils.java, there is a possible way to for a malicious Talkback service to …
-
High 7.8
In setupAccessibilityServices of AccessibilityFragment.java, there is a possible way to hide an enabled accessibility s…
-
High 7.8
In checkPermissions of SafeActivityOptions.java, there is a possible background activity launch due to a logic error in…
-
High 8.8
In getDefaultCBRPackageName of CellBroadcastHandler.java, there is a possible escalation of privilege due to a logic er…
-
High 7.8
In getCallingPackageName of CredentialStorage, there is a possible permission bypass due to a logic error in the code. …
-
High 7.8
In setDisplayName of AssociationRequest.java, there is a possible way for an app to retain CDM association due to a log…
-
High 7.8
In showDismissibleKeyguard of KeyguardService.java, there is a possible way to bypass app pinning due to a logic error …
-
High 7.8
In executeAppFunction of AppSearchManagerService.java, there is a possible background activity launch due to a logic er…
-
High 7.8
In multiple locations, there is a possible way to hijack the Launcher app due to a logic error in the code. This could …
-
High 7.8
In multiple functions of LocationProviderManager.java, there is a possible background activity launch due to a logic er…
-
High 7.3CVE-2025-26443 Public exploit
In parseHtml of HtmlToSpannedParser.java, there is a possible way to install apps without allowing installation from un…
-
High 7.8
In onHandleForceStop of VoiceInteractionManagerService.java, there is a bug that could cause the system to incorrectly …
-
High 7.8
In gxp_mapping_create of gxp_mapping.c, there is a possible privilege escalation due to a logic error in the code. This…
-
High 7.8
There is a possible escalation of privilege due to a logic error in the code. This could lead to local escalation of pr…
-
High 8.8
Inappropriate implementation in Extensions in Google Chrome prior to 140.0.7339.80 allowed a remote attacker to bypass …
-
High 7.8
In setMediaButtonReceiver of multiple files, there is a possible way to launch arbitrary activities from background due…
-
High 7.8
In handleKeyGestureEvent of PhoneWindowManager.java, there is a possible lock screen bypass due to a logic error in the…
-
High 7.8
In canForward of IntentForwarderActivity.java, there is a possible bypass of the cross profile intent filter most commo…
-
High 7.3
In onCreate of NotificationAccessConfirmationActivity.java, there is a possible way to grant notification access above …
-
High 7.8
In multiple functions of Permissions.java, there is a possible way to override the state of the user's location permiss…
-
High 7.0
SMM IDT Privilege Escalation Vulnerability
EDK2 contains a vulnerability in BIOS where an attacker may cause “Protection Mechanism Failure” by local access. Successful exploitation of this vulnerability will lead to arbitrary code execution and impact Confidentiality, Integrity, and Availability.
-
High 8.1
XSLT documents could bypass CSP
XSLT document loading did not correctly propagate the source document which bypassed its CSP. This vulnerability was fixed in Firefox 141, Firefox ESR 128.13, Firefox ESR 140.1, Thunderbird 141, Thunderbird 128.13, and Thunderbird 140.1.
-
High 7.7
Emerson ValveLink Products Protection Mechanism Failure
Emerson ValveLink products do not use or incorrectly uses a protection mechanism that provides sufficient defense against directed attacks against the product.
-
High 8.8
Windows SmartScreen Security Feature Bypass Vulnerability
Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.
-
High 7.5CVE-2025-47984 EPSS 23%
Windows GDI Information Disclosure Vulnerability
Protection mechanism failure in Windows GDI allows an unauthorized attacker to disclose information over a network.
-
High 7.8
Windows Virtualization-Based Security (VBS) Elevation of Privilege Vulnerability
Protection mechanism failure in Windows Virtualization-Based Security (VBS) Enclave allows an authorized attacker to elevate privileges locally.
-
High 8.8
A vulnerability has been identified in RUGGEDCOM RMC8388 V5.X (All versions < V5.10.0), RUGGEDCOM RMC8388NC V5.X (All v…
-
High 7.5
DHCP Server Service Denial of Service Vulnerability
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 7.5
DHCP Server Service Denial of Service Vulnerability
Protection mechanism failure in Windows DHCP Server allows an unauthorized attacker to deny service over a network.
-
High 8.2
A file quarantine bypass was addressed with additional checks. This issue is fixed in macOS Sequoia 15.4, macOS Sonoma …
-
High 8.4
There is a possible bypass of carrier restrictions due to an unusual root cause. This could lead to local escalation of…
-
High 7.8
A logic issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.5, macOS Sonoma 14.7.6, macOS…