CVE-2025-27559

Incorrect default permissions for some AI Playground software before version v2.3.0 alpha may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-26470

Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-26470

Incorrect default permissions for some IntelR Distribution for Python software installers before version 2025.1.0 may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-26470

CVE-2025-26470 affects Intel Distribution for Python prior to 2025.1.0. The root cause is incorrect default permissions in the software installers, which may allow an authenticated local user to escalate privileges. Affected product: Intel Distribution for Python (Python distribution from Intel)....

CVE-2025-20087

Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20087

Incorrect default permissions for some IntelR oneAPI DPC++/C++ Compiler software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

CVE-2025-20023 affects Intel Graphics Driver installers, where incorrect default permissions may allow an authenticated local user to escalate privileges. Affected products include Intel\u00a0Graphics Drivers for Arc, Iris Xe, Pro, Data Center GPU Flex, and related processors; root cause is impro...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

CVE-2025-20023

Incorrect default permissions for some IntelR Graphics Driver software installers may allow an authenticated user to potentially enable escalation of privilege via local access...

AI Playground Software Advisory

Summary: A potential security vulnerability for some AI Playground software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2025-27559 Description: Incorrect default permissions for some AI Playgrou...

Intel AI Playground 安全漏洞

Intel AI Playground is an open source application based on AI acceleration technology launched by Intel, which is mainly used to simplify the threshold of AI development, supporting features such as image generation, enhancement and chatbots. Intel AI Playground suffers from a privilege improprie...

PT-2025-32693 · Intel · Intel Graphics Driver

Name of the Vulnerable Software and Affected Versions: IntelR Graphics Driver software installers affected versions not specified Description: Incorrect default permissions in some IntelR Graphics Driver software installers may allow an authenticated user to potentially escalate privileges via...

PT-2025-32746 · Intel · Intel Distribution For Python

Name of the Vulnerable Software and Affected Versions: IntelR Distribution for Python versions prior to 2025.1.0 Description: Incorrect default permissions in some IntelR Distribution for Python software installers may allow an authenticated user to potentially escalate privileges via local acces...

PT-2025-32752 · Unknown · Ai Playground

Name of the Vulnerable Software and Affected Versions: AI Playground versions prior to 2.3.0 alpha Description: Incorrect default permissions in some AI Playground software versions prior to v2.3.0 alpha may allow an authenticated user to potentially escalate privileges via local access...

BIT-LIBPHP-2020-7063 Files added to tar with Phar::buildFromIterator have all-access permissions

In PHP versions 7.2.x below 7.2.28, 7.3.x below 7.3.15 and 7.4.x below 7.4.3, when creating PHAR archive using PharData::buildFromIterator function, the files are added with default permissions 0666, or all access even if the original files on the filesystem were with more restrictive permissions...

Incorrect Default Permissions

Overview Affected versions of this package are vulnerable to Incorrect Default Permissions due to incorrect permissions set on the /etc/passwd file during the build process. An attacker can gain elevated privileges by modifying the /etc/passwd file if they have the ability to execute commands...

CVE-2025-41658 CODESYS Toolkit Exposes Sensitive Files via Default Permissions

CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions...

CVE-2025-41658 CODESYS Toolkit Exposes Sensitive Files via Default Permissions

CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions...

PT-2025-31798

Name of the Vulnerable Software and Affected Versions CODESYS Runtime Toolkit-based products affected versions not specified Description CODESYS Runtime Toolkit-based products may expose sensitive files to local low-privileged operating system users due to default file permissions. Recommendation...

CVE-2025-26469

An incorrect default permissions vulnerability exists in the CServerSettings::SetRegistryValues functionality of MedDream PACS Premium 7.3.3.840. A specially crafted application can decrypt credentials stored in a configuration-related registry key. An attacker can execute a malicious script or...