CWE-283
CWE-283 · 3 records · 1 with a public proof-of-concept
Records the NVD classes under CWE-283, highest CVSS first.
- HIGH 7.8CVE-2026-83791
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
- HIGH 7.3CVE-2026-110237public PoC
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC pac…
- UNSCOREDCVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman rea…