CVE-2024-7513

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

CVE-2024-7513 IMPACT

A code execution vulnerability exists in the affected product. The vulnerability occurs due to improper default file permissions allowing any user to edit or replace files, which are executed by account with elevated permissions.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

No affected versions have been published.

Timeline

Published: Aug 14, 2024
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2024

CVE-2024-75146.5The WordPress Comments Import & Export plugin for WordPress is vulnerable to to arbitrary file read due to insufficient file path validation CVE-2024-75157.5CVE-2024-7515 IMPACT A denial-of-service vulnerability exists in the affected products. A malformed PTP management packet can cause a major CVE-2024-75167.1A vulnerability in Brocade Fabric OS versions before 9.2.2 could allow man-in-the-middle attackers to conduct remote Service Session Hijacki CVE-2024-75177.8A command injection vulnerability in Brocade Fabric OS before 9.2.0c, and 9.2.1 through 9.2.1a on IP extension platforms could allow a local CVE-2024-75186.5Select options could obscure the fullscreen notification dialog. This could be used by a malicious site to perform a spoofing attack. This v CVE-2024-75199.6Insufficient checks when processing graphics shared memory could have led to memory corruption. This could be leveraged by an attacker to pe CVE-2024-75208.8A type confusion bug in WebAssembly could be leveraged by an attacker to potentially achieve code execution. This vulnerability affects Fire CVE-2024-75218.8Incomplete WebAssembly exception handing could have led to a use-after-free. This vulnerability affects Firefox < 129, Firefox ESR < 115.14,CVE-2024-75228.8Editor code failed to check an attribute value. This could have led to an out-of-bounds read. This vulnerability affects Firefox < 129, Fire CVE-2024-75238.1A select option could partially obscure security prompts. This could be used by a malicious site to trick a user into granting permissions. CVE-2024-75246.1Firefox adds web-compatibility shims in place of some tracking scripts blocked by Enhanced Tracking Protection. On a site protected by Cont CVE-2024-75258.1It was possible for a web extension with minimal permissions to create a `StreamFilter` which could be used to read and modify the response