CWE-283
CWE-283 · 5 records · 3 with a public proof-of-concept
Records the NVD classes under CWE-283, highest CVSS first.
- HIGH 7.8CVE-2026-83791
Improper authorization in Windows Virtual Input allows an authorized attacker to elevate privileges locally.
- HIGH 7.3CVE-2026-110237public PoC
Vifm 0.8.1-beta through 0.14.4 reuses a pre-existing IPC FIFO in the shared temporary directory without checking ownership, allowing local users to execute commands as another user. Attackers can pre-create a world-writable vifm-ipc-vifm FIFO and write IPC pac…
- MEDIUM 6.3CVE-2026-112911public PoC
filelock is a platform-independent file lock for Python. From 3.30.0 until 4.2.1, StrictSoftFileLock versions from 3.30.0 and SoftReadWriteLock versions from 4.0.0 can adopt a protocol directory created first by another local user in a shared parent directory,…
filelock
- MEDIUM 5.9CVE-2026-118029public PoC
Unverified ownership of the default query result location in the Athena module in AWS SDK for pandas (awswrangler) before 3.16.1 might allow remote actors to read Athena query results and tamper with result sets returned to the caller via a pre-created S3 buck…
- UNSCOREDCVE-2026-93853
Unverified ownership in Barman snapshot backup deletion allows a principal who can write the backup catalog to cause Barman to delete unrelated cloud snapshots. When a snapshot backup is deleted, either explicitly or by retention policy enforcement, Barman rea…