CVE WatchJul 9, 2026

CVE-2021-34110

WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious

CVSS

7.8

High

EPSS

1.2%

p63

KEV

—

Exploit Today

0-100

Published: Jul 8, 2021 · Last modified: Jul 9, 2026 · CWE-732

EPSS · 30d

1.2%EPSS · 30 days1.2%

2026-06-302026-07-16

Technical description

WinWaste.NET version 1.0.6183.16475 has incorrect permissions, allowing a local unprivileged user to replace the executable with a malicious file that will be executed with "LocalSystem" privileges.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2017-176778.8 HIG

60.4%

——18BMC Remedy 9.1SP3 is affected by authenticated code execution. Authenticated users that have the right to create reports can use BIRT templates to run code.8d CVE-2022-262817.5 HIG

56.5%

——17BigAnt Server v5.6.06 was discovered to contain an incorrect access control issue.8d CVE-2023-317487.8 HIG

53.4%

——16Insecure permissions in MobileTrans v4.0.11 allows attackers to escalate privileges to local admin via replacing the executable file.8d CVE-2023-390049.8 CRI

51.9%

——16Insecure permissions in the configuration directory (/conf/) of OPNsense Community Edition before 23.7 and Business Edition before 23.4.2 allow attackers to access sensitive information (e.g., hashed root password) which could lead to privilege escalation.8d CVE-2021-406496.5 MED

51.6%

——15In Connx Version 6.2.0.1269 (20210623), a cookie can be issued by the application and not have the HttpOnly flag set.8d CVE-2022-351678.8 HIG

50.4%

——15Printix Cloud Print Management v1.3.1149.0 for Windows was discovered to contain insecure permissions.8d