CWE-378: CWE-378

CVE-2025-32438 is a local privilege escalation vulnerability in make-initrd-ng on NixOS systems. When systemd.shutdownRamfs.enable is enabled (the def...

This vulnerability allows local privilege escalation on Unix-like systems when Gradle builds use vulnerable versions of the native-platform library. A...

This vulnerability allows local privilege escalation on Unix-like systems by exploiting insecure permissions in the system temporary directory. Attack...

Dell SupportAssist OS Recovery versions before 5.5.14.0 create temporary files with insecure permissions, allowing local authenticated attackers to mo...

This critical vulnerability in Getscreen Agent 2.19.6 on Windows allows local attackers to create temporary files with insecure permissions during ins...

CVE-2021-25314 is a local privilege escalation vulnerability in hawk2 component of SUSE Linux Enterprise High Availability. It allows local attackers ...

Dell SupportAssist OS Recovery versions before 5.5.15.1 create temporary files with insecure permissions, allowing local low-privileged attackers to m...

This vulnerability in Cisco AnyConnect Secure Mobility Client for Windows allows authenticated local attackers to hijack DLL or executable files durin...

This vulnerability allows authenticated local attackers on Windows systems with Cisco AnyConnect Secure Mobility Client to hijack DLL or executable fi...

This vulnerability allows authenticated local attackers on Windows systems with Cisco AnyConnect Secure Mobility Client to hijack DLL or executable fi...

Dell SupportAssist OS Recovery versions before 5.5.15.1 create temporary files with insecure permissions, allowing local low-privileged attackers to m...

This vulnerability allows attackers to change other users' passwords on Reolink Smart 2K+ Plug-in Wi-Fi Video Doorbell devices by manipulating the use...

This vulnerability in NETSCOUT nGeniusONE allows authenticated users to create arbitrary files on the system. This could lead to various malicious act...

Dell NativeEdge version 2.1.0.0 contains a temporary file creation vulnerability with insecure permissions. A high-privileged attacker with local acce...

CVE-2026-2817 is a local privilege escalation vulnerability in Spring Data Geode where snapshot imports extract archives into predictable, permissive ...

This vulnerability in Google Guava's createTempDir() method creates temporary directories with world-readable permissions on Unix-like systems, allowi...