Vulnerability of software for optimizing and deploying AI-based application: The AMD Ryzen AI platform has a vulnerability related to incorrect default permissions, which allows attackers to increase their privileges and execute arbitrary code.

The vulnerability of software for optimizing and deploying AI-based applications on AMD Ryzen AI is related to incorrect default permissions for the installation folder. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

CVE-2025-0014

Incorrect default permissions on the AMD RyzenTM AI installation folder could allow an attacker to achieve privilege escalation, potentially resulting in arbitrary code execution...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions in the validateMultitenancy function, invoked when creating a ServiceAccount, ClusterRole, or ClusterRoleBinding during a TempoStack or TempoMonolithic instance deployment. A user with full access to their...

The vulnerability of the software installer for monitoring and managing Intel Memory and Storage Tool (MAS) memory and solid-state drives allows a hacker to cause a service failure.

The vulnerability of the software installer for monitoring and managing Intel Memory and Storage Tool MAS related devices is associated with incorrect default permissions. Exploiting this vulnerability can allow an attacker to cause a service failure...

CVE-2025-20912

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch...

CVE-2025-20912

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch...

CVE-2025-20910

Incorrect default permission in Galaxy Watch Gallery prior to SMR Mar-2025 Release 1 allows local attackers to access data in Galaxy Watch Gallery...

CVE-2025-20912

Incorrect default permission in DiagMonAgent prior to SMR Mar-2025 Release 1 allows local attackers to access data within Galaxy Watch...

PT-2025-9881

Name of the Vulnerable Software and Affected Versions Galaxy Watch Gallery versions prior to SMR Mar-2025 Release 1 Description The issue is related to an incorrect default permission in Galaxy Watch Gallery, allowing local attackers to access data. Recommendations For versions prior to SMR...

PT-2025-9883

Name of the Vulnerable Software and Affected Versions DiagMonAgent versions prior to SMR Mar-2025 Release 1 Description The issue is related to an incorrect default permission in DiagMonAgent, allowing local attackers to access data within Galaxy Watch. Recommendations For versions prior to SMR...

Incorrect Default Permissions

Overview spotipy is an A light weight Python library for the Spotify Web API Affected versions of this package are vulnerable to Incorrect Default Permissions via the CacheHandler class. An attacker can gain unauthorized access to administrative actions on the Spotify account by reading the spoti...

CVE-2024-42419

Incorrect default permissions for some IntelR GPA and IntelR GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-32942

Incorrect default permissions for some IntelR DSA installer for Windows before version 24.2.19.5 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2024-42419

Incorrect default permissions for some IntelR GPA and IntelR GPA Framework software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

Intel GPA 安全漏洞

Intel GPA is a tool for graphical application analysis from Intel Corporation USA. A security vulnerability exists in Intel GPA versions prior to 2024.3, which stems from incorrect default permissions that could allow authenticated users to enable privilege escalation via local access...

PT-2025-6642 · Intel · Intel Dsa

Name of the Vulnerable Software and Affected Versions: IntelR DSA versions prior to 24.2.19.5 Description: The issue is related to incorrect default permissions for some IntelR DSA installers for Windows, which may allow an authenticated user to potentially enable escalation of privilege via loca...

PT-2025-6384 · Amd · Amd Integrated Management Technology (Aim-T) Manageability Service

Name of the Vulnerable Software and Affected Versions: AMD Integrated Management Technology AIM-T Manageability Service affected versions not specified Description: The issue is related to incorrect default permissions in the installation directory of the AMD Integrated Management Technology AIM-...

AMD DASH CLI Incorrect Default Permissions Vulnerability

AMD ID: AMD-SB-9008 Potential Impact: Arbitrary Code Execution Severity: High Summary A researcher reported an incorrect default permissions vulnerability within the AMD DASH CLI Software. The AMD Desktop and mobile Architecture for System Hardware DASH Command Line Interface CLI is a command-lin...

AMD Integrated Management Technology 安全漏洞

AMD Integrated Management Technology is a management technology from Ultraviolet Semiconductor AMD that is primarily used to enable AMD DASH management features on AMD PRO hardware. A security vulnerability exists in AMD Integrated Management Technology that stems from incorrect default permissio...

CVE-2024-21820

Incorrect default permissions in some IntelR XeonR processor memory controller configurations when using IntelR SGX may allow a privileged user to potentially enable escalation of privilege via local access...