The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,829 vulnerabilities with CWE-269
CVE-2024-49742
HIGH
NotificationAccessConfirmationActivity - Privilege Escalation
CVSS 7.8
CVE-2024-55954
HIGH
OpenObserve < 0.14.1 - Authenticated Privilege Escalation via User Removal Endpoint
CVSS 8.7
CVE-2024-9636
CRITICAL
Post Grid and Gutenberg Blocks <2.3.3 - Privilege Escalation
CVSS 9.8
CVE-2024-12398
HIGH
Zyxel NWA/WA/WAX Firmware Authenticated Privilege Escalation via Config Upload
CVSS 8.8
CVE-2024-11128
HIGH
Bitdefender Virus Scanner < 3.18 - Unauthenticated .dynamic Library Injection via DYLD Injection
CVSS 7.8
CVE-2024-53706
HIGH
Gen7 SonicOS Cloud - Privilege Escalation
CVSS 7.8
CVE-2024-56447
HIGH
Window Management Module - Info Disclosure
CVSS 7.8
CVE-2024-55632
HIGH
Trend Micro Apex One < 14.0.14203 and < 2019.13140 - Local Privilege Escalation via Security Agent Link Following
CVSS 7.8
CVE-2024-55631
HIGH
Trend Micro Apex One < 14.0.14203 and < 2019.13140 - Privilege Escalation via Engine Link Following
CVSS 7.8
CVE-2024-13058
MEDIUM
SoftIron HyperCloud <2.5.0 - Privilege Escalation
CVE-2024-56335
HIGH
vaultwarden < 1.32.7 - Authenticated Privilege Escalation and Denial of Service via Group Manipulation
CVSS 7.6
CVE-2024-12786
HIGH
X1a0He Adobe Downloader <1.3.1 - Privilege Escalation
CVSS 7.8
CVE-2024-38499
HIGH
CA Client Automation - Info Disclosure
CVSS 8.8
CVE-2024-55949
CRITICAL
MinIO >= RELEASE.2022-06-25T15-50-16Z < RELEASE.2024-12-13T22-19-12Z - Privilege Escalation via IAM Import API
CVE-2024-11721
HIGH
Frontend Admin by DynamiApps <3.24.5 - Privilege Escalation
CVSS 8.1
CVE-2024-49035
HIGH
KEV
Partner.Microsoft.com - Unauthenticated Privilege Escalation
CVSS 8.7
CVE-2024-52336
HIGH
Fast Datapath for Red Hat Enterprise Linux - Privilege Escalation via Tuned D-Bus instance_create Function
CVSS 7.8
CVE-2024-38830
HIGH
VMware Aria Operations 8.0-8.18.1 - Local Privilege Escalation to Root
CVSS 7.8
CVE-2024-9941
HIGH
WPGYM - Wordpress Gym Management System <67.1.0 - Privilege Escalation
CVSS 8.8
CVE-2024-31141
MEDIUM
Apache Kafka Clients - Improper Privilege Management
CVSS 6.5
CVE-2024-52926
MEDIUM
Delinea Privilege Manager <12.0.2 - Privilege Escalation
CVSS 6.5
CVE-2024-9192
HIGH
WordPress Video Robot - Privilege Escalation
CVSS 8.8
CVE-2024-52516
LOW
Nextcloud Server 26.0.0-26.0.13.8 and 28.0.0-28.0.8 - Improper Privilege Management
CVSS 3.0
CVE-2024-8068
HIGH
KEV
Citrix Session Recording - Privilege Escalation
CVSS 8.0
CVE-2024-49558
HIGH
Dell SmartFabric OS10 Software <10.5.6 - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities
2,829
Exploit Likelihood
Medium