The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,829 vulnerabilities with CWE-269
CVE-2024-0003
CRITICAL
FlashArray Purity 5.3.17-5.3.20 - Privilege Escalation via Remote Administrative Service
CVSS 9.1
CVE-2024-41228
HIGH
AliyunContainerService pouch <1.3.1 - Privilege Escalation
CVSS 7.6
CVE-2024-34331
CRITICAL
Parallels Desktop for Mac <19.3.0 - Privilege Escalation
CVSS 9.8
CVE-2024-8853
CRITICAL
Webo-facto <= 1.40 - Unauthenticated Privilege Escalation via Username Manipulation
CVSS 9.8
CVE-2024-47000
HIGH
Zitadel < 2.54.10 and 2.62.0-2.62.1 - Improper Privilege Management in Service Account Deactivation
CVSS 8.1
CVE-2024-46999
HIGH
Zitadel < 2.54.10 and 2.62.0 - Improper Privilege Management in User Grants Deactivation
CVSS 7.3
CVE-2024-45752
HIGH
logiops <= 0.3.4 - Privilege Escalation via Unrestricted D-Bus Service
CVSS 8.5
CVE-2024-46989
LOW
spicedb < 1.35.3 - Improper Privilege Management via Caveated Indirect Subject Types
CVSS 3.7
CVE-2024-45496
CRITICAL
OpenShift Controller Manager - Privilege Escalation via Crafted .gitconfig File
CVSS 9.9
CVE-2024-44147
MEDIUM
iPadOS < 18.0 - Unauthorized Local Network Access via State Management Issue
CVSS 5.5
CVE-2024-40861
HIGH
macOS Sequoia <15 - Privilege Escalation
CVSS 7.8
CVE-2024-42798
HIGH
Kashipara Music Management System <1.0 - Privilege Escalation
CVSS 7.6
CVE-2024-6482
HIGH
WordPress <1.7.49 - Privilege Escalation
CVSS 8.8
CVE-2024-8246
HIGH
WordPress <=2.8.11 - Privilege Escalation
CVSS 8.8
CVE-2024-29779
HIGH
Google Android - Privilege Escalation
CVSS 7.8
CVE-2024-7960
CRITICAL
Rockwell Automation Pavilion8 < 6.0 - Improper Privilege Management
CVSS 9.1
CVE-2024-8533
HIGH
Rockwell Automation - Privilege Escalation
CVSS 8.8
CVE-2024-7890
HIGH
Citrix Workspace < 2203.1 and < 2405 - Local Privilege Escalation
CVSS 7.3
CVE-2024-5760
HIGH
Samsung Universal Print Driver - Privilege Escalation
CVSS 7.8
CVE-2024-8306
HIGH
Vijeo Designer < 6.3 - Authenticated Privilege Escalation via Binary Tampering
CVSS 7.8
CVE-2024-40662
HIGH
Android - Local Privilege Escalation via Malformed Uri Object
CVSS 7.8
CVE-2024-40658
HIGH
SoftVideoDecoderOMXComponent - Memory Corruption
CVSS 7.8
CVE-2024-40657
HIGH
Android - Local Privilege Escalation via Confused Deputy in AccountTypePreferenceLoader
CVSS 7.8
CVE-2024-44893
CRITICAL
JimuReport <1.7.8 - Privilege Escalation
CVSS 9.8
CVE-2024-38014
HIGH
KEV
Microsoft Windows Installer - Elevation of Privilege
CVSS 7.8
Details
Vulnerabilities
2,829
Exploit Likelihood
Medium