CWE-269
3,315 CVEs • Abstraction: Class • Likelihood of Exploit: Medium
Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
CVEs (3,315)
CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS |
|---|
1H3c 11Secpath F100 C G3 Firmware Secpath F500 6gw FirmwareSecpath F5010 Firmware+8 moreJun 17, 2026 Dec 27, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 h3c firewall <= 3.10 ESS6703 has a privilege bypass vulnerability. |
enlightenment_sys in Enlightenment before 0.25.4 allows local users to gain privileges because it is setuid root, and the system library function mishandles pathnames that begin with a /dev/.. substring. |
IBM AIX 7.1, 7.2, 7.3, and VIOS 3.1 could allow a non-privileged local user to exploit a vulnerability in the rm_rlcache_file command to obtain root privileges. IBM X-Force ID: 236690. |
A vulnerability has been identified in Micro Focus ZENworks 2020 Update 3a and prior versions. This vulnerability allows administrators with rights to perform actions (e.g., install a bundle) on a set of managed devices,...Show more |
Incorrect Use of Privileged APIs in GitHub repository usememos/memos prior to 0.9.0. |
Proofpoint Enterprise Protection (PPS/PoD) contains a vulnerability which allows the pps user to escalate to root privileges due to unnecessary permissions. This affects all versions 8.19.0 and below.
|
A privilege escalation vulnerability exists in the oslo.privsep functionality of OpenStack git master 05194e7618 and prior. Overly permissive functionality within tools leveraging this library within a container can lead...Show more |
A privilege escalation vulnerability exists in the sudo functionality of OpenStack Kolla git master 05194e7618. A misconfiguration in /etc/sudoers within a container can lead to increased privileges. |
wfshbr64.sys and wfshbr32.sys specially crafted IOCTL allows arbitrary user to perform local privilege escalation |
Some smartphones have configuration issues. Successful exploitation of this vulnerability may cause privilege escalation, which results in system service exceptions. |
vRealize Operations (vROps) contains a privilege escalation vulnerability. VMware has evaluated the severity of this issue to be in the Important severity range with a maximum CVSSv3 base score of 7.2. |
A logic issue was addressed with improved state management. This issue is fixed in tvOS 16.2, macOS Monterey 12.6.2, macOS Ventura 13.1, iOS 15.7.2 and iPadOS 15.7.2, iOS 16.2 and iPadOS 16.2. An app may be able to use a...Show more |
An access issue existed with privileged API calls. This issue was addressed with additional restrictions. This issue is fixed in iOS 16.2 and iPadOS 16.2, tvOS 16.2, watchOS 9.2. A user may be able to elevate privileges. |
1Microsoft 5Windows 10 Windows 11Windows Server 2019+2 moreJun 17, 2026 Dec 13, 2022 N/A· v4 7.8 HIGH· v3 N/A· v2 Windows Subsystem for Linux (WSL2) Kernel Elevation of Privilege Vulnerability |
1Secomea 12Sitemanager 1129 Firmware Sitemanager 1139 FirmwareSitemanager 1149 Firmware+9 moreJun 17, 2026 Dec 13, 2022 N/A· v4 6.5 MEDIUM· v3 N/A· v2 Debug tool in Secomea SiteManager allows logged-in administrator to modify system state in an unintended manner. |
1Sap 1Business Planning And Consolidation Jun 17, 2026 Dec 13, 2022 N/A· v4 7.5 HIGH· v3 N/A· v2 In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By impl...Show more |
Improper Privilege Management in GitHub repository ikus060/rdiffweb prior to 2.5.2. |
1Hpe 9Hf20 Firmware Hf20c FirmwareHf20h Firmware+6 moreJun 17, 2026 Dec 12, 2022 N/A· v4 5.5 MEDIUM· v3 N/A· v2 Improper Privilege Management vulnerability in Hewlett Packard Enterprise Nimble Storage Hybrid Flash Arrays and Nimble Storage Secondary Flash Arrays.
|
1Hp 2Command Center Omen Gaming HubJun 17, 2026 Dec 12, 2022 N/A· v4 9.8 CRITICAL· v3 N/A· v2 A potential security vulnerability has been identified in OMEN Gaming Hub and in HP Command Center which may allow escalation of privilege and/or denial of service. HP has released software updates to mitigate the potent...Show more |
Elevation of privilege in the Azure SQL Data Source in Devolutions Remote Desktop Manager 2022.3.13 to 2022.3.24 allows an authenticated user to spoof a privileged account.
|