CVE-2022-32207
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a ren
CVSS
9.8
Critical
EPSS
12.3%
p96
KEV
—
Exploit Today
29
0-100
Published: Jul 7, 2022 · Last modified: Oct 14, 2026 · CWE-840 · CWE-276
7.7%EPSS · 30 days12.3%
2026-10-052026-11-02
When curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation atomic by finalizing the operation with a rename from a temporary name to the final target file name.In that rename operation, it might accidentally *widen* the permissions for the target file, leaving the updated file accessible to more users than intended.
- seclists.orghttp://seclists.org/fulldisclosure/2022/Oct/28
- seclists.orghttp://seclists.org/fulldisclosure/2022/Oct/41
- hackerone.comhttps://hackerone.com/reports/1573634
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
- security.gentoo.orghttps://security.gentoo.org/glsa/202212-01
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220915-0003/
- support.apple.comhttps://support.apple.com/kb/HT213488
- www.debian.orghttps://www.debian.org/security/2022/dsa-5197
- seclists.orghttp://seclists.org/fulldisclosure/2022/Oct/28
- seclists.orghttp://seclists.org/fulldisclosure/2022/Oct/41
- hackerone.comhttps://hackerone.com/reports/1573634
- lists.fedoraproject.orghttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/BEV6BR4MTI3CEWK2YU2HQZUW5FAS3FEY/
- security.gentoo.orghttps://security.gentoo.org/glsa/202212-01
- security.netapp.comhttps://security.netapp.com/advisory/ntap-20220915-0003/
- support.apple.comhttps://support.apple.com/kb/HT213488
- www.debian.orghttps://www.debian.org/security/2022/dsa-5197
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-146325.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-398330.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-419740.html
- cert-portal.siemens.comhttps://cert-portal.siemens.com/productcert/html/ssa-558014.html
CVECVSSEPSSKEVRExploitTitleMod.
CVE-2026-918957.1 HIG—
——0Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain an Incorrect Default Permissions vulnerability. A low privileged attacker with local access could potentially exploit this vulnerability, leading to Information Tampering.3hCVE-2026-1070527.5 HIG29.2%
——9Insecure permissions in the AIDL interface of ProjectMAXS MAXS Module FileRead versionCode 27 allows unauthorized attackers to arbitrarily reead files outside of the sandbox via providing an absolute path.4dCVE-2026-1141487.8 HIG29.2%
——9Incorrect default permissions in ASP.NET Core allows an authorized attacker to elevate privileges locally.4dCVE-2026-1123577.8 HIG2.5%
——1GFI KerioConnect (Kerio Connect) Outlook Connector (Offline Edition), 'KOFF', before 10.0.9 Patch 2 contains a local privilege escalation vulnerability caused by weak installer permissions that leave the product directory writable by the built-in Users group. A local non-administrative attacker can replace the searchd.exe service binary used by the bundled KOFFIndexingService, which runs as LocalSystem, to execute arbitrary code with NT AUTHORITY\SYSTEM privileges upon the next service start or reboot.5dCVE-2026-1164614.3 MED12.6%
——4A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument productUnitSalePrice can lead to business logic errors. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.4dCVE-2026-1133457.8 HIG1.8%
——1Electronic delivery item Inspection Support System provided by Japan's Ministry of Land, Infrastructure, Transport and Tourism contains an improper file access permission vulnerability. Files in the installation folder of the application may be tampered with, resulting in arbitrary code execution.8d