CWE-281

CWE-281 · 9 records · 6 with a public proof-of-concept

Records the NVD classes under CWE-281, highest CVSS first.

  1. CRITICAL 9.8CVE-2026-1013062026-10-15

    SCM_RIGHTS file descriptor passing did not preserve FD_RESOLVE_BENEATH when a descriptor was transferred. A process could clear the restriction by sending the descriptor to itself over a Unix domain socket. A process in a jail that has received a directory f…

    freebsd

    AI risk analysis on Exploit-DB.ai →

  2. HIGH 8.8CVE-2026-82964public PoC2026-09-16

    Improper preservation of permissions in the Avast sandbox minifilter driver (aswSnx.sys) on Windows allows a local, low-privileged attacker executing inside the sandbox to escape file isolation and escalate to SYSTEM. When the sandbox virtualizes a file it …

    AI risk analysis on Exploit-DB.ai →

  3. HIGH 8.2CVE-2025-101492026-10-19

    The SCIM endpoint does not sufficiently validate authorization for federated users when performing operations against the local user store. This occurs when a local and a federated user share the same username, allowing a federated user to perform actions inte…

    AI risk analysis on Exploit-DB.ai →

  4. HIGH 7.8CVE-2026-47599public PoC2026-09-30

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source kernel module where an unprivileged local user could cause improper preservation of memory access permissions during DMA mapping. A successful exploit of this vulnerability might l…

    AI risk analysis on Exploit-DB.ai →

  5. HIGH 7.8CVE-2026-47595public PoC2026-09-30

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code exe…

    AI risk analysis on Exploit-DB.ai →

  6. HIGH 7.8CVE-2026-47489public PoC2026-09-30

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where permissions on read-only memory might not be preserved. A successful exploit of this vulnerability might lead to code execution, denial of service, escalation of privil…

    AI risk analysis on Exploit-DB.ai →

  7. HIGH 7CVE-2026-47596public PoC2026-09-30

    NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode layer where an unprivileged user can write to read-only memory because the memory's permissions are not preserved. A successful exploit of this vulnerability might lead to code exe…

    AI risk analysis on Exploit-DB.ai →

  8. MEDIUM 5.3CVE-2026-61709public PoC2026-09-16

    OpenFGA is an authorization and permission engine built for developers. Prior to 1.18.1, the ListUsers API could return a user that should have been excluded when an authorization relation used an intersection containing a base but not excluded operand, the ba…

    AI risk analysis on Exploit-DB.ai →

  9. UNSCOREDCVE-2026-481832026-11-05

    Improper permission handling during buffer operations allows untrusted applications to create memory mappings with inappropriate permissions

    AI risk analysis on Exploit-DB.ai →