CWE-250

Medium likelihood

Execution with Unnecessary Privileges

Parent: CWE-269 - Improper Privilege Management

The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.

326 vulnerabilities with CWE-250
CVE-2020-10056 HIGH
Siemens License Management Utility < 2.4 - Authenticated Privilege Escalation via lmgrd Service Configuration
CVSS 7.8
CVE-2020-10290 MEDIUM
Universal Robots - RCE
CVSS 6.8
CVE-2020-14493 HIGH
OpenClinic GA <5.89.05b - SQL Injection
CVSS 8.8
CVE-2020-2023 LOW
Kata Containers <1.11.1, <1.10.5, <=1.9 - Remote Code Execution
CVSS 3.8
CVE-2020-7252 MEDIUM
McAfee Data eXchange Layer < 6.0.0 - Unquoted Service Path Arbitrary Code Execution
CVSS 4.2
CVE-2019-15790 LOW
Apport - Privilege Escalation via PID Recycling
CVSS 2.8
CVE-2019-16784 HIGH
PyInstaller <3.6 - Privilege Escalation
CVSS 7.0
CVE-2019-16767 MEDIUM
ezmaster < 5.2.11 - Execution with Unnecessary Privileges
CVSS 6.6
CVE-2019-16765 HIGH
Microsoft CodeQL < 1.0.1 - Arbitrary Code Execution via Workspace Directory Traversal
CVSS 7.4
CVE-2019-10168 HIGH
libvirt <4.10.1-5.4.1 - Code Injection
CVSS 7.8
CVE-2019-10167 HIGH
libvirt <4.10.1-5.4.1 - Code Injection
CVSS 7.8
CVE-2019-10147 HIGH
rkt < 1.30.0 - Missing Authorization via rkt enter Command
CVSS 7.7
CVE-2019-10145 HIGH
rkt < 1.30.0 - Missing Authorization via rkt enter Command
CVSS 7.7
CVE-2019-10144 HIGH
rkt < 1.30.0 - Improper Privilege Management via rkt enter
CVSS 7.7
CVE-2019-10143 HIGH
Freeradius <3.0.19 - Privilege Escalation
CVSS 7.0
CVE-2018-25123 HIGH
Nagios XI <5.5.7 - Privilege Escalation
CVSS 7.8
CVE-2018-25078 HIGH
man-db <2.8.5 - Privilege Escalation
CVSS 7.8
CVE-2018-16888 MEDIUM
systemd <v237 - Privilege Escalation
CVSS 4.7
CVE-2018-5413 HIGH
Imperva SecureSphere <13.0-11.5 - Privilege Escalation
CVSS 8.8
CVE-2018-10853 HIGH
Linux kernel KVM <4.18 - Privilege Escalation
CVSS 7.0
CVE-2018-10872 MEDIUM
Red Hat Enterprise Linux 6.10 - Denial of Service via Stack Switch Exception Handling
CVSS 6.5
CVE-2018-10892 MEDIUM
Docker/Moby <current - Privilege Escalation
CVSS 5.3
CVE-2018-10856 MEDIUM
podman <0.6.1 - Privilege Escalation
CVSS 5.3
CVE-2018-1087 HIGH
kernel <4.16-4.17.3 - Use After Free
CVSS 8.0
CVE-2018-8853 HIGH
Philips Brilliance <2.6.2 - Privilege Escalation
CVSS 8.8
Details
Vulnerabilities 326
Exploit Likelihood Medium
Links
MITRE CWE Entry Search this CWE With Exploits