Least Privilege Violation

The elevated privilege level required to perform operations such as chroot() should be dropped immediately after the operation is performed.

CVEs (44)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2023-32451 1Dell 1Display Manager Jun 17, 2026 Feb 6, 2024 N/A· v4 7.8 HIGH· v3 N/A· v2 Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during installation and uninstallation
CVE-2023-28047 1Dell 1Display Manager Jun 17, 2026 Apr 20, 2023 N/A· v4 7.8 HIGH· v3 N/A· v2 Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation. A local low privilege attacker could potentially exploit this vulnerability, leading to th...Show more Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation. A local low privilege attacker could potentially exploit this vulnerability, leading to the execution of arbitrary code on the operating system with high privileges. Show less
CVE-2023-28046 1Dell 1Display Manager Jun 17, 2026 Apr 6, 2023 N/A· v4 7.1 HIGH· v3 N/A· v2 Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to t...Show more Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local low privilege attacker could potentially exploit this vulnerability, leading to the deletion of arbitrary files on the operating system with high privileges. Show less
CVE-2021-26726 1Valmet 1Dna Jun 17, 2026 Feb 16, 2022 N/A· v4 8.8 HIGH· v3 8.3 HIGH· v2 A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012...Show more A remote code execution vulnerability affecting a Valmet DNA service listening on TCP port 1517, allows an attacker to execute commands with SYSTEM privileges This issue affects: Valmet DNA versions from Collection 2012 until Collection 2021.Show less

Previous 1 23