Improper Privilege Management

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

CVEs (3,315)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-0221 1Mcafee 1Application And Change Control Jun 17, 2026 Jan 13, 2023 N/A· v4 4.4 MEDIUM· v3 N/A· v2 Product security bypass vulnerability in ACC prior to version 8.3.4 allows a locally logged-in attacker with administrator privileges to bypass the execution controls provided by ACC using the utilman program.
CVE-2022-39182 1Mingham Smith 1Tardis 2000 Jun 17, 2026 Jan 12, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 H C Mingham-Smith Ltd - Tardis 2000 Privilege escalation.Version 1.6 is vulnerable to privilege escalation which may allow a malicious actor to gain system privileges.
CVE-2023-21774 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21773 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21772 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21755 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Kernel Elevation of Privilege Vulnerability
CVE-2023-21730 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21561 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21552 1Microsoft 15Windows 10 1607 Windows 10 1809Windows 10 20h2+12 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows GDI Elevation of Privilege Vulnerability
CVE-2023-21551 1Microsoft 8Windows 10 1809 Windows 10 20h2Windows 10 21h2+5 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Microsoft Cryptographic Services Elevation of Privilege Vulnerability
CVE-2023-21549 1Microsoft 14Windows 10 1607 Windows 10 1809Windows 10 20h2+11 more Jun 17, 2026 Jan 10, 2023 N/A· v4 8.8 HIGH· v3 N/A· v2 Windows SMB Witness Service Elevation of Privilege Vulnerability
CVE-2023-21542 1Microsoft 9Windows 10 1607 Windows 7Windows 8.1+6 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Windows Installer Elevation of Privilege Vulnerability
CVE-2023-21531 1Microsoft 1Azure Service Fabric Jun 17, 2026 Jan 10, 2023 N/A· v4 7.0 HIGH· v3 N/A· v2 Azure Service Fabric Container Elevation of Privilege Vulnerability
CVE-2022-4294 4Avas!t AvgAvira+1 more 4Antivirus AntivirusAvira Security+1 more Jun 17, 2026 Jan 10, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain eleva...Show more Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. Show less
CVE-2022-0668 1Jfrog 1Artifactory Jun 17, 2026 Jan 8, 2023 N/A· v4 9.8 CRITICAL· v3 N/A· v2 JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated user.
CVE-2022-43535 1Arubanetworks 1Clearpass Policy Manager Jun 17, 2026 Jan 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AU...Show more A vulnerability in the ClearPass OnGuard Windows agent could allow malicious users on a Windows instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with NT AUTHORITY\SYSTEM level privileges on the Windows instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below. Show less
CVE-2022-43534 1Arubanetworks 1Clearpass Policy Manager Jun 17, 2026 Jan 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root leve...Show more A vulnerability in the ClearPass OnGuard Linux agent could allow malicious users on a Linux instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the Linux instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below. Show less
CVE-2022-43533 1Arubanetworks 1Clearpass Policy Manager Jun 17, 2026 Jan 5, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root lev...Show more A vulnerability in the ClearPass OnGuard macOS agent could allow malicious users on a macOS instance to elevate their user privileges. A successful exploit could allow these users to execute arbitrary code with root level privileges on the macOS instance in Aruba ClearPass Policy Manager version(s): ClearPass Policy Manager 6.10.x: 6.10.7 and below and ClearPass Policy Manager 6.9.x: 6.9.12 and below. Show less
CVE-2022-4808 1Usememos 1Memos Jun 17, 2026 Dec 28, 2022 N/A· v4 8.8 HIGH· v3 N/A· v2 Improper Privilege Management in GitHub repository usememos/memos prior to 0.9.1.
CVE-2022-46172 1Goauthentik 1Authentik Jun 17, 2026 Dec 28, 2022 N/A· v4 6.4 MEDIUM· v3 N/A· v2 authentik is an open-source Identity provider focused on flexibility and versatility. In versions prior to 2022.10.4, and 2022.11.4, any authenticated user can create an arbitrary number of accounts through the default f...Show more authentik is an open-source Identity provider focused on flexibility and versatility. In versions prior to 2022.10.4, and 2022.11.4, any authenticated user can create an arbitrary number of accounts through the default flows. This would circumvent any policy in a situation where it is undesirable for users to create new accounts by themselves. This may also affect other applications as these new basic accounts would exist throughout the SSO infrastructure. By default the newly created accounts cannot be logged into as no password reset exists by default. However password resets are likely to be enabled by most installations. This vulnerability pertains to the user context used in the default-user-settings-flow, /api/v3/flows/instances/default-user-settings-flow/execute/. This issue has been fixed in versions 2022.10.4 and 2022.11.4.Show less

Previous 1...979899...166 Next