By weakness (CWE)
CWE-269: related vulnerabilities
CVEs classified under CWE-269. Understanding the weakness class helps prioritize systemic fixes over one-off patches.
109 published vulnerabilities · page 2 of 2
- CVE-2026-45256MEDIUM 5.5
A permission-checking flaw in FreeBSD's thr_kill2() system call allows unprivileged local users to send signals to processes they shouldn't be able to reach. The kernel performs a permission check but ignores the result before actually delivering the signal, meaning the signal arrives even though it was denied. An attacker with local access can exploit this to stop or crash critical system processes, causing service outages. The vulnerability is made more practical because thread IDs are assigned sequentially and globally, allowing attackers to discover targets through brute-force enumeration without needing detailed system knowledge.
- CVE-2026-11276MEDIUM 5.1
Google Chrome versions before 149.0.7827.53 contain a flaw in how the Cast feature (which enables screen mirroring and media streaming to nearby devices) processes network traffic. An attacker physically present on the same local network can send specially crafted traffic to bypass access controls that would normally prevent unauthorized casting operations. This is a local network attack that doesn't require user interaction but is limited in scope—it cannot crash systems or execute arbitrary code, only manipulate casting permissions.
- CVE-2026-50565MEDIUM 4.9
Fission, an open-source serverless framework for Kubernetes, had a configuration flaw in versions before 1.24.0 where builder pods automatically mounted sensitive service account credentials into user-supplied container images. This meant anyone deploying a function through Fission could potentially access the credentials needed to interact with your Kubernetes cluster, such as listing resources or reading secrets. The issue stems from Kubernetes' default behavior of auto-mounting service account tokens unless explicitly disabled—Fission wasn't disabling this protection for builder pods. The flaw has been patched in version 1.24.0.
- CVE-2026-12313MEDIUM 4.7
A vulnerability in Firefox and Thunderbird's process sandboxing mechanism allows an attacker to leak sensitive information and potentially escape the sandbox through a crafted webpage or message. The attack requires user interaction (such as visiting a malicious site or opening a specially prepared message) and affects your system's security boundary—the sandbox that isolates the browser process from the rest of your computer. Mozilla has patched this in Firefox 152, Firefox ESR 140.12, Thunderbird 152, and Thunderbird 140.12.
- CVE-2026-54319MEDIUM 4.2
Daytona, a runtime platform for executing AI-generated code and agent workflows, contains a path-traversal vulnerability in versions prior to 0.186. When users specify a volume identifier to mount storage, the system failed to properly validate the path, potentially allowing an authenticated user to reference storage locations outside the intended directories. An attacker with valid credentials could craft a specially formatted volume reference to access or modify files beyond the sandbox's intended scope.
- CVE-2026-56212LOW 3.8
Capgo versions before 12.128.2 contain a flaw in how they enforce two-factor authentication policies. A team or organization administrator can mandate that all team members use two-factor authentication, but the system doesn't check whether the administrator themselves has 2FA enabled first. This creates a gap where security policy enforcement becomes inconsistent and opens the door to administrative misuse—an admin could lock team members out of their accounts by enforcing a security requirement they haven't met themselves.
- CVE-2026-0016LOW 3.3
A permissions validation flaw in Android's credential management system allows a local attacker with limited user privileges to read sensitive information across other user accounts without special permissions or user interaction. The vulnerability resides in how the system handles credential provider updates when services are removed, creating a bypass that exposes data intended to be isolated between users.
- CVE-2026-0050LOW 3.3
CVE-2026-0050 is a local information disclosure vulnerability in Android's Bluetooth adapter service. A malicious app with basic user-level permissions can bypass security checks in the handleBondStateChanged function to read sensitive Bluetooth-related information without requiring additional privileges or user interaction. The impact is limited to information disclosure; the attacker cannot modify data or crash the system.
- CVE-2026-28586LOW 3.3
CVE-2026-28586 is a local information disclosure vulnerability in Android's AppOpsService that allows an already-authenticated user to bypass permission checks and read sensitive data they shouldn't have access to. The flaw requires the attacker to already have a local account on the device; there's no way to exploit it remotely. The exposure is classified as low-severity because the data leaked is limited and no system functions are disrupted.