CWE-273 · Improper Check for Dropped Privileges
39 CVEs classified under CWE-273 (Improper Check for Dropped Privileges). Browse by severity and year.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-34844 | Critical | 9.8 | 2023-06-29 | Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape. |
CVE-2021-36372 | Critical | 9.8 | 2021-11-19 | In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users… |
CVE-2020-24361 | Critical | 9.8 | 2020-08-16 | SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec. |
CVE-2011-3350 | Critical | 9.8 | 2019-11-19 | masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping. |
CVE-2011-2921 | Critical | 9.8 | 2019-11-19 | ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command exec… |
CVE-2012-1187 | Critical | 9.8 | 2019-10-29 | Bitlbee does not drop extra group privileges correctly in unix.c |
CVE-2017-6972 | Critical | 9.8 | 2017-03-22 | AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka Ali… |
CVE-2026-32107 | High | 8.8 | 2026-04-17 | xrdp is an open source RDP server. In versions through 0.10.5, the session execution component did not properly handle an error during the privilege drop proce… |
CVE-2025-27396 | High | 8.8 | 2025-03-11 | A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of pri… |
CVE-2024-8382 | High | 8.8 | 2024-09-03 | Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to u… |
CVE-2020-14300 | High | 8.8 | 2020-07-13 | The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/er… |
CVE-2020-14298 | High | 8.8 | 2020-07-13 | The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for C… |
CVE-2026-21882 | High | 8.4 | 2026-03-02 | theshit is a command-line utility that automatically detects and fixes common mistakes in shell commands. Prior to version 0.2.0, improper privilege dropping a… |
CVE-2018-16466 | High | 8.1 | 2018-10-30 | Improper revalidation of permissions in Nextcloud Server prior to 14.0.0, 13.0.6 and 12.0.11 lead to not accepting access restrictions by acess tokens. |
CVE-2026-0099 | High | 7.8 | 2026-06-01 | In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could l… |
CVE-2023-34322 | High | 7.8 | 2024-01-05 | For migration as well as to work around kernels unaware of L1TF (see XSA-273), PV guests may be run in shadow paging mode. Since Xen itself needs to be mapped… |
CVE-2023-35692 | High | 7.8 | 2023-07-14 | In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could… |
CVE-2022-0358 | High | 7.8 | 2022-08-29 | A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest use… |
CVE-2019-20044 | High | 7.8 | 2020-02-24 | In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the… |
CVE-2019-18276 | High | 7.8 | 2019-11-28 | An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its re… |