The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,830 vulnerabilities with CWE-269
CVE-2024-27301
HIGH
Support App 2.3.1-2.5.1 - Privilege Escalation via .zshenv in Postinstall Script
CVSS 7.3
CVE-2024-28391
CRITICAL
FME Modules quickproducttable < 1.3.0 - SQL Injection and Privilege Escalation via readCsv() and displayAjax Methods
CVSS 9.8
CVE-2024-2433
MEDIUM
Palo Alto Networks Panorama - Privilege Escalation
CVSS 4.3
CVE-2024-2432
MEDIUM
Palo Alto Networks GlobalProtect < - Privilege Escalation
CVSS 4.5
CVE-2024-2431
MEDIUM
Palo Alto Networks GlobalProtect - Privilege Escalation
CVSS 5.5
CVE-2024-20262
MEDIUM
Cisco IOS XR - Privilege Escalation
CVSS 6.5
CVE-2024-1505
HIGH
Academy LMS < 1.9.19 - Authenticated Privilege Escalation via User Meta Update
CVSS 8.8
CVE-2024-1138
HIGH
TIBCO FTL - Enterprise Edition <6.10.1 - Privilege Escalation
CVSS 8.8
CVE-2024-26169
HIGH
KEV
Windows Error Reporting Service - Elevation of Privilege
CVSS 7.8
CVE-2024-28197
HIGH
Zitadel < 2.44.3 - Session Hijacking via Subdomain Cookie Access
CVSS 7.5
CVE-2024-27233
HIGH
Android - Local Privilege Escalation via Uninitialized Data in ppcfw_init_secpolicy
CVSS 7.8
CVE-2024-27224
HIGH
Android - Local Privilege Escalation via strncpy Bounds Check Bypass
CVSS 7.8
CVE-2024-27222
HIGH
Android - Local Privilege Escalation via Intent Redirect GRANT_URI_PERMISSIONS Attack
CVSS 7.8
CVE-2024-27210
HIGH
Android - Local Privilege Escalation via Missing Bounds Check in fvp.c policy_check
CVSS 7.8
CVE-2024-27207
CRITICAL
Android - Improper Privilege Management via Exported Broadcast Receivers
CVSS 9.1
CVE-2024-25990
MEDIUM
Android - Local Privilege Escalation via Race Condition in pktproc_perftest_gen_rx_packet_sktbuf_mode
CVSS 6.4
CVE-2024-25987
MEDIUM
Android - Local Privilege Escalation via pt_sysctl_command Bounds Check Bypass
CVSS 6.7
CVE-2024-22008
HIGH
Google Android - Out-of-Bounds Write in tmu.c
CVSS 7.8
CVE-2024-0049
HIGH
Android - Local Privilege Escalation via Heap Buffer Overflow
CVSS 7.8
CVE-2024-0046
HIGH
Android - Local Privilege Escalation via InstallPackageHelper Logic Error
CVSS 7.8
CVE-2024-23276
HIGH
macOS < 12.7.4, < 13.6.5, < 14.4 - Privilege Escalation
CVSS 7.8
CVE-2024-23253
LOW
macOS < 14.4 - Unprotected User Data Exposure via Photos Library Permissions
CVSS 3.3
CVE-2024-22752
HIGH
EaseUS MobiMover <6.0.5 - Privilege Escalation
CVSS 8.1
CVE-2024-1442
MEDIUM
Grafana 8.5.0-9.5.6 - Improper Privilege Management via Data Source UID Manipulation
CVSS 6.0
CVE-2024-2005
CRITICAL
Blue Planet Inventory < 22.12 - Privilege Escalation via SAML Misconfiguration
CVSS 9.0
Details
Vulnerabilities
2,830
Exploit Likelihood
Medium