What CVEs are caused by CWE-264?

5,346 recorded CVEs are attributed to CWE-264, including CVE-2016-3643, CVE-2015-1769 and CVE-2016-8363. 2 are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

Is CWE-264 actively exploited?

Yes. 2 CWE-264 vulnerabilities are in CISA's KEV catalog of actively exploited flaws, out of 5,346 recorded CVEs.

CWE-264: Permissions, Privileges, and Access Controls

Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.

Last updated May 1, 2026

5,346

Recorded CVEs

With this primary CWE

KEVs

In the CISA KEV catalog

Weaknesses

In this category

Obsolete

Status

Per MITRE

Real-world CVEs

5,346 recorded CVEs are caused by CWE-264 (Permissions, Privileges, and Access Controls), including 2 in CISA's KEV (Known Exploited Vulnerabilities) catalog. KEVs are shown first. 32 new CWE-264 CVEs have been recorded so far in 2026 (27 in 2025).

Showing 12 of 5,346 recorded CWE-264 CVEs. Get an alert for each new one, with AI-written analysis and fixes.

Monitor these CVEs

Frequently asked questions

Common questions about CWE-264.

What is CWE-264?: Weaknesses in this category are related to the management of permissions, privileges, and other security features that are used to perform access control.
What CVEs are caused by CWE-264?: 5,346 recorded CVEs are attributed to CWE-264, including CVE-2016-3643, CVE-2015-1769 and CVE-2016-8363. 2 are listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
Is CWE-264 actively exploited?: Yes. 2 CWE-264 vulnerabilities are in CISA's KEV catalog of actively exploited flaws, out of 5,346 recorded CVEs.

Sources

[1]Writing Secure Code (2002)
[2]Supplemental Details - 2022 CWE Top 25 (2022)

References

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.