CWE-269 · Improper Privilege Management (page 25)
Page 25 of 32 — CVEs classified under CWE-269, newest first, with CVSS severity and publication dates.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-26936 | High | 7.8 | 2021-02-10 | The replay-sorcery program in ReplaySorcery 0.4.0 through 0.5.0, when using the default setuid-root configuration, allows a local attacker to escalate privileg… |
CVE-2021-0327 | High | 7.8 | 2021-02-10 | In getContentProviderImpl of ActivityManagerService.java, there is a possible permission bypass due to non-restored binder identities. This could lead to local… |
CVE-2021-23876 | High | 7.8 | 2021-02-10 | Bypass Remote Procedure call in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and perform arbitrary file modif… |
CVE-2021-23874 | High | 8.2 | 2021-02-10 | Arbitrary Process Execution vulnerability in McAfee Total Protection (MTP) prior to 16.0.30 allows a local user to gain elevated privileges and execute arbitra… |
CVE-2021-23882 | High | 8.2 | 2021-02-10 | Improper Access Control vulnerability in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows local administrators to prevent… |
CVE-2021-23880 | Medium | 6.7 | 2021-02-10 | Improper Access Control in attribute in McAfee Endpoint Security (ENS) for Windows prior to 10.7.0 February 2021 Update allows authenticated local administrato… |
CVE-2020-26191 | High | 7.8 | 2021-02-09 | Dell EMC PowerScale OneFS versions 8.1.0 - 9.1.0 contain a privilege escalation vulnerability. A user with ISI_PRIV_JOB_ENGINE may use the PermissionRepair job… |
CVE-2020-35517 | High | 8.2 | 2021-01-28 | A flaw was found in qemu. A host privilege escalation issue was found in the virtio-fs shared file system daemon where a privileged guest user is able to creat… |
CVE-2020-6024 | High | 7.8 | 2021-01-20 | Check Point SmartConsole before R80.10 Build 185, R80.20 Build 119, R80.30 before Build 94, R80.40 before Build 415, and R81 before Build 548 were vulnerable t… |
CVE-2021-0223 | High | 7.8 | 2021-01-15 | A local privilege escalation vulnerability in telnetd.real of Juniper Networks Junos OS may allow a locally authenticated shell user to escalate privileges and… |
CVE-2021-0204 | High | 7.8 | 2021-01-15 | A sensitive information disclosure vulnerability in delta-export configuration utility (dexp) of Juniper Networks Junos OS may allow a locally authenticated sh… |
CVE-2021-20618 | Critical | 9.8 | 2021-01-14 | Privilege chaining vulnerability in acmailer ver. 4.0.2 and earlier, and acmailer DB ver. 1.1.4 and earlier allows remote attackers to bypass authentication an… |
CVE-2021-1258 | Medium | 5.5 | 2021-01-13 | A vulnerability in the upgrade component of Cisco AnyConnect Secure Mobility Client could allow an authenticated, local attacker with low privileges to read ar… |
CVE-2020-9141 | Critical | 9.1 | 2021-01-13 | There is a improper privilege management vulnerability in some Huawei smartphone. Successful exploitation of this vulnerability can cause information disclosur… |
CVE-2021-1719 | High | 8.0 | 2021-01-12 | Microsoft SharePoint Elevation of Privilege Vulnerability |
CVE-2021-1712 | High | 8.0 | 2021-01-12 | Microsoft SharePoint Elevation of Privilege Vulnerability |
CVE-2021-1709 | High | 7.0 | 2021-01-12 | Windows Win32k Elevation of Privilege Vulnerability |
CVE-2021-1706 | High | 7.3 | 2021-01-12 | Windows LUAFV Elevation of Privilege Vulnerability |
CVE-2021-1704 | High | 7.3 | 2021-01-12 | Windows Hyper-V Elevation of Privilege Vulnerability |
CVE-2021-1703 | High | 7.8 | 2021-01-12 | Windows Event Logging Service Elevation of Privilege Vulnerability |
CVE-2021-1702 | High | 7.8 | 2021-01-12 | Windows Remote Procedure Call Runtime Elevation of Privilege Vulnerability |
CVE-2021-1697 | High | 7.8 | 2021-01-12 | Windows InstallService Elevation of Privilege Vulnerability |
CVE-2021-1695 | High | 7.8 | 2021-01-12 | Windows Print Spooler Elevation of Privilege Vulnerability |
CVE-2021-1694 | High | 7.5 | 2021-01-12 | Windows Update Stack Elevation of Privilege Vulnerability |
CVE-2021-1693 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1690 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1689 | High | 7.8 | 2021-01-12 | Windows Multipoint Management Elevation of Privilege Vulnerability |
CVE-2021-1688 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1687 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1686 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1685 | High | 7.3 | 2021-01-12 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
CVE-2021-1682 | High | 7.0 | 2021-01-12 | Windows Kernel Elevation of Privilege Vulnerability |
CVE-2021-1681 | High | 7.8 | 2021-01-12 | Windows WalletService Elevation of Privilege Vulnerability |
CVE-2021-1680 | High | 7.8 | 2021-01-12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
CVE-2021-1662 | High | 7.8 | 2021-01-12 | Windows Event Tracing Elevation of Privilege Vulnerability |
CVE-2021-1659 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1657 | High | 7.8 | 2021-01-12 | Windows Fax Compose Form Remote Code Execution Vulnerability |
CVE-2021-1655 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1654 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1653 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1652 | High | 7.8 | 2021-01-12 | Windows CSC Service Elevation of Privilege Vulnerability |
CVE-2021-1651 | High | 7.8 | 2021-01-12 | Diagnostics Hub Standard Collector Elevation of Privilege Vulnerability |
CVE-2021-1650 | High | 7.8 | 2021-01-12 | Windows Runtime C++ Template Library Elevation of Privilege Vulnerability |
CVE-2021-1649 | High | 7.8 | 2021-01-12 | Active Template Library Elevation of Privilege Vulnerability |
CVE-2021-1648 | High | 7.8 | 2021-01-12 | Microsoft splwow64 Elevation of Privilege Vulnerability |
CVE-2021-1646 | Medium | 6.6 | 2021-01-12 | Windows WLAN Service Elevation of Privilege Vulnerability |
CVE-2021-1642 | High | 7.8 | 2021-01-12 | Windows AppX Deployment Extensions Elevation of Privilege Vulnerability |
CVE-2021-0306 | High | 7.8 | 2021-01-11 | In addAllPermissions of PermissionManagerService.java, there is a possible permissions bypass when upgrading major Android versions which allows an app to gain… |
CVE-2018-9333 | High | 7.8 | 2021-01-11 | K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Buffer Overflow. The impact is: execute arbitrary code (local). The component is: K7TSMngr.ex… |
CVE-2018-9332 | High | 7.8 | 2021-01-11 | K7Computing Pvt Ltd K7AntiVirus Premium 15.01.00.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). |
CVE-2018-8724 | High | 7.8 | 2021-01-11 | K7Computing Pvt Ltd K7AntiVirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: gain privileges (local). The component is: K7TSMngr… |
CVE-2018-8044 | High | 7.8 | 2021-01-11 | K7Computing Pvt Ltd K7Antivirus Premium 15.1.0.53 is affected by: Incorrect Access Control. The impact is: Local Process Execution (local). The component is: K… |
CVE-2018-11008 | Medium | 5.5 | 2021-01-11 | An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. |
CVE-2018-11006 | Medium | 5.5 | 2021-01-11 | An Incorrect Access Control issue was discovered in K7Computing K7AntiVirus Premium 15.01.00.53. |
CVE-2021-1051 | High | 8.4 | 2021-01-08 | NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mode layer (nvlddmkm.sys) handler for DxgkDdiEscape in which a local user can get… |
CVE-2020-8275 | Medium | 4.3 | 2021-01-06 | Citrix Secure Mail for Android before 20.11.0 suffers from improper access control allowing unauthenticated access to read limited calendar related data stored… |
CVE-2020-26181 | High | 7.0 | 2021-01-05 | Dell EMC Isilon OneFS versions 8.1 and later and Dell EMC PowerScale OneFS version 9.0.0 contain a privilege escalation vulnerability on a SmartLock Compliance… |
CVE-2020-36156 | Critical | 9.9 | 2021-01-04 | An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Authenticated Privilege Escalation via Profile Update. Any user with wp-… |
CVE-2020-36155 | Critical | 10.0 | 2021-01-04 | An issue was discovered in the Ultimate Member plugin before 2.1.12 for WordPress, aka Unauthenticated Privilege Escalation via User Meta. An attacker could su… |
CVE-2020-8290 | High | 7.8 | 2020-12-27 | Backblaze for Windows and Backblaze for macOS before 7.0.0.439 suffer from improper privilege management in `bztransmit` helper due to lack of permission handl… |
CVE-2020-25194 | High | 8.8 | 2020-12-23 | The built-in WEB server for MOXA NPort IAW5000A-I/O firmware version 2.1 or lower has improper privilege management, which may allow an attacker with user priv… |
CVE-2020-24678 | High | 8.8 | 2020-12-22 | An authenticated user might execute malicious code under the user context and take control of the system. S+ Operations or S+ Historian database is affected by… |
CVE-2020-25106 | High | 7.8 | 2020-12-22 | Nanosystems SupRemo 4.1.3.2348 allows attackers to obtain LocalSystem access because File Manager can be used to rename Supremo.exe and then upload a Trojan ho… |
CVE-2020-13519 | High | 8.8 | 2020-12-18 | A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c402088 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (I… |
CVE-2020-13515 | High | 8.8 | 2020-12-18 | A privilege escalation vulnerability exists in the WinRing0x64 Driver IRP 0x9c40a148 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet (I… |
CVE-2020-13514 | High | 8.8 | 2020-12-18 | A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O reques… |
CVE-2020-13513 | High | 8.8 | 2020-12-18 | A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O reques… |
CVE-2020-13512 | High | 8.8 | 2020-12-18 | A privilege escalation vulnerability exists in the WinRing0x64 Driver Privileged I/O Write IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O reques… |
CVE-2020-13518 | Medium | 6.5 | 2020-12-18 | An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c402084 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet… |
CVE-2020-13517 | Medium | 5.5 | 2020-12-18 | An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406104 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet… |
CVE-2020-13516 | Medium | 6.5 | 2020-12-18 | An information disclosure vulnerability exists in the WinRing0x64 Driver IRP 0x9c406144 functionality of NZXT CAM 4.8.0. A specially crafted I/O request packet… |
CVE-2020-13511 | Medium | 6.5 | 2020-12-18 | An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O requ… |
CVE-2020-13510 | Medium | 6.5 | 2020-12-18 | An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O requ… |
CVE-2020-13509 | Medium | 6.5 | 2020-12-18 | An information disclosure vulnerability exists in the WinRing0x64 Driver Privileged I/O Read IRPs functionality of NZXT CAM 4.8.0. A specially crafted I/O requ… |
CVE-2020-12519 | High | 8.8 | 2020-12-17 | On Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS an attacker can use this vulnerability i.e. to open a reverse shell with root privileges. |
CVE-2020-29481 | High | 8.8 | 2020-12-15 | An issue was discovered in Xen through 4.14.x. Access rights of Xenstore nodes are per domid. Unfortunately, existing granted access rights are not removed whe… |
CVE-2020-8283 | High | 8.8 | 2020-12-14 | An authorised user on a Windows host running Citrix Universal Print Server can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912… |
CVE-2020-8258 | High | 7.5 | 2020-12-14 | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, allows an attacke… |
CVE-2020-8257 | Critical | 9.8 | 2020-12-14 | Improper privilege management on services run by Citrix Gateway Plug-in for Windows, versions before and including 13.0-61.48 and 12.1-58.15, lead to privilege… |
CVE-2020-27133 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-27132 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-27127 | Critical | 9.9 | 2020-12-11 | Multiple vulnerabilities in Cisco Jabber for Windows, Jabber for MacOS, and Jabber for mobile platforms could allow an attacker to execute arbitrary programs o… |
CVE-2020-17103 | High | 7.0 | 2020-12-10 | Windows Cloud Files Mini Filter Driver Elevation of Privilege Vulnerability |
CVE-2020-14318 | Medium | 4.3 | 2020-12-03 | A flaw was found in the way samba handled file and directory permissions. An authenticated user could use this flaw to gain access to certain file and director… |
CVE-2020-7335 | High | 7.5 | 2020-12-01 | Privilege Escalation vulnerability in Microsoft Windows client McAfee Total Protection (MTP) prior to 16.0.29 allows local users to gain elevated privileges vi… |
CVE-2020-9114 | High | 7.8 | 2020-12-01 | FusionCompute versions 6.3.0, 6.3.1, 6.5.0, 6.5.1 and 8.0.0 have a privilege escalation vulnerability. Due to improper privilege management, an attacker with c… |
CVE-2020-8351 | High | 7.8 | 2020-11-30 | A privilege escalation vulnerability was reported in Lenovo PCManager prior to version 3.0.50.9162 that could allow an authenticated user to execute code with… |
CVE-2020-15248 | Medium | 4.0 | 2020-11-23 | October is a free, open-source, self-hosted CMS platform based on the Laravel PHP Framework. In October CMS from version 1.0.319 and before version 1.0.470, ba… |
CVE-2020-7544 | High | 7.8 | 2020-11-19 | A CWE-269 Improper Privilege Management vulnerability exists in EcoStruxureª Operator Terminal Expert runtime (Vijeo XD) that could cause privilege escalation… |
CVE-2020-12495 | Critical | 9.1 | 2020-11-19 | Endress+Hauser Ecograph T (Neutral/Private Label) (RSG35, ORSG35) with Firmware version prior to V2.0.0 is prone to improper privilege management. The affected… |
CVE-2020-3482 | Medium | 6.5 | 2020-11-18 | A vulnerability in the Traversal Using Relays around NAT (TURN) server component of Cisco Expressway software could allow an unauthenticated, remote attacker t… |
CVE-2020-26080 | Medium | 4.1 | 2020-11-18 | A vulnerability in the user management functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to manage user inf… |
CVE-2020-26077 | Medium | 4.3 | 2020-11-18 | A vulnerability in the access control functionality of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to view lists of us… |
CVE-2020-26072 | High | 8.7 | 2020-11-18 | A vulnerability in the SOAP API of Cisco IoT Field Network Director (FND) could allow an authenticated, remote attacker to access and modify information on dev… |
CVE-2020-8269 | High | 8.8 | 2020-11-16 | An unprivileged Windows user on the VDA can perform arbitrary command execution as SYSTEM in CVAD versions before 2009, 1912 LTSR CU1 hotfixes CTX285870 and CT… |
CVE-2020-13638 | Critical | 9.8 | 2020-11-13 | lib/crud/userprocess.php in rConfig 3.9.x before 3.9.7 has an authentication bypass, leading to administrator account creation. This issue has been fixed in 3… |
CVE-2020-2022 | High | 7.5 | 2020-11-12 | An information exposure vulnerability exists in Palo Alto Networks Panorama software that discloses the token for the Panorama web interface administrator's se… |
CVE-2020-16993 | Medium | 5.4 | 2020-11-11 | Azure Sphere Elevation of Privilege Vulnerability |
CVE-2020-16126 | Low | 3.3 | 2020-11-11 | An Ubuntu-specific modification to AccountsService in versions before 0.6.55-0ubuntu13.2, among other earlier versions, improperly dropped the ruid, allowing u… |
CVE-2020-16122 | High | 8.2 | 2020-11-07 | PackageKit's apt backend mistakenly treated all local debs as trusted. The apt security model is based on repository trust and not on the contents of individua… |