Gold Open Source
ExplorePackagesVulnerabilitiesMCP Servers
Login
Gold Open Source

The authoritative source for production-ready open-source components. Every package, container image, AI model, and MCP server undergoes rigorous verification for security, malware, and license compliance.

Explore Gold

  • Explore Everything
  • Packages
  • Gold Packages
  • Container Images
  • AI Models
  • MCP Servers
  • Agent Skills
  • Chip Manufacturers

Security Data & Tools

  • Scan Your Dependencies
  • Trending Threats
  • Threat RSS Feeds
  • CVE Database
  • Actively Exploited (KEV)
  • SGZ Zero-Days
  • CWE Index
  • MITRE ATT&CK
  • Malicious Packages
  • Security Glossary
  • Supply-Chain Report
  • Developers (API & Badge)
  • Chrome Extension
  • Credits & Data Sources

Products

  • The Platform
  • ESSCM
  • Portal
  • TPRM
  • OSM
  • Cowork
  • Code / Runner
  • Guard

Use Cases

  • Know Your Software
  • Auto-Fix Vulnerabilities
  • Asset Discovery
  • AI Governance
  • MCP Server Security
  • Supply Chain Compliance
  • Zero-Day Discovery
  • All Use Cases

Company

  • About
  • Pricing
  • Blog
  • Documentation
  • Safeguard Academy
  • Contact
  • Privacy Policy
  • Terms of Service

© 2026 Gold Open Source. All rights reserved.

Built with care bySafeguard
Home/CWEs/CWE-264
Common Weakness Enumeration

CWE-264: Permissions, Privileges, and Access Controls

ShareXLinkedInRedditHN

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Abstraction
Category
Related CVEs
32

▪ References & documentation

https://cwe.mitre.org/data/definitions/264.htmlNVD CWE listing

▪ Related CVEs

CVE-2008-3655High

Security vulnerability in ruby

CVE-2015-8440Critical

Security vulnerability in air

CVE-2015-3083Medium

Security vulnerability in air

CVE-2015-3085Medium

Security vulnerability in air

CVE-2009-1863Critical

Security vulnerability in air

CVE-2014-8442High

Security vulnerability in air

CVE-2015-3079Medium

Security vulnerability in air

CVE-2015-3082Medium

Security vulnerability in air

CVE-2012-5278Critical

Security vulnerability in air

CVE-2015-3101Medium

Security vulnerability in air

CVE-2015-7662High

Security vulnerability in air

CVE-2011-0542Low

Security vulnerability in fuse

CVE-2011-0543Low

Security vulnerability in fuse

CVE-2016-1233High

Security vulnerability in fuse

CVE-2015-3202Low

Security vulnerability in fuse

CVE-2014-4200Medium

Security vulnerability in tools

CVE-2016-8659High

Security vulnerability in bubblewrap

CVE-2015-5167Medium

Security vulnerability in ranger

CVE-2015-0266High

Security vulnerability in ranger

CVE-2011-1473Medium

Security vulnerability in openssl

CVE-2016-4802High

Security vulnerability in curl

CVE-2011-1473Medium

Security vulnerability in openssl

CVE-2015-8440Critical

Security vulnerability in air

CVE-2009-1863Critical

Security vulnerability in air

CVE-2012-5278Critical

Security vulnerability in air

CVE-2014-8442High

Security vulnerability in air

CVE-2015-3079Medium

Security vulnerability in air

CVE-2015-3082Medium

Security vulnerability in air

CVE-2015-3085Medium

Security vulnerability in air

CVE-2015-3101Medium

Security vulnerability in air

CVE-2015-3083Medium

Security vulnerability in air

CVE-2015-7662High

Security vulnerability in air