CWE-277

CWE-277 · 3 records · 0 with a public proof-of-concept

Records the NVD classes under CWE-277, highest CVSS first.

  1. MEDIUM 5.5CVE-2025-113952026-09-15

    A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

    AI risk analysis on Exploit-DB.ai →

  2. UNSCOREDCVE-2026-260522026-11-10

    Insecure inherited permissions for some Intel(R) Graphics Driver software installers within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a high complexity attack may en…

    AI risk analysis on Exploit-DB.ai →

  3. UNSCOREDCVE-2026-1115732026-11-06

    Incorrect permissions on the Checkmk Windows agent's data directory, caused by a race condition that discards the permission changes during service start, in Checkmk <2.5.0p18, <2.4.0p39, <2.3.0p52 and 2.2.0 (EOL) allow a local user to execute arbitrary code a…

    AI risk analysis on Exploit-DB.ai →