The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,834 vulnerabilities with CWE-269
CVE-2022-39202
MEDIUM
matrix-appservice-irc < 0.35.0 - Improper Privilege Management via IRC Mode Command Parsing
CVSS 4.3
CVE-2022-36861
MEDIUM
Android SystemUI - Improper Privilege Management via Custom Permission Misuse
CVSS 5.9
CVE-2022-40297
HIGH
UBports Ubuntu Touch 16.04 - Improper Privilege Management via Sudo Passcode
CVSS 7.8
CVE-2022-36088
MEDIUM
GoCD <22.2.0 - Privilege Escalation
CVSS 5.0
CVE-2022-31166
HIGH
XWiki Platform Old Core <12.0RC1 - Privilege Escalation
CVSS 8.1
CVE-2022-30298
HIGH
FortiSOAR < 7.2.1 - Privilege Escalation via Python Command Execution
CVSS 7.0
CVE-2022-32840
HIGH
iPadOS < 15.6 - Arbitrary Code Execution with Kernel Privileges
CVSS 7.8
CVE-2022-31676
HIGH
VMware Tools 10.0.0-12.0.0 - Local Privilege Escalation
CVSS 7.8
CVE-2022-36157
HIGH
XXL-JOB < 2.3.1 and 2.4.0 - Insecure Permissions Leading to Privilege Escalation
CVSS 8.8
CVE-2022-1901
MEDIUM
Octopus Deploy <version> - Info Disclosure
CVSS 5.3
CVE-2022-2568
MEDIUM
Ansible Automation Platform - Privilege Escalation
CVSS 6.5
CVE-2022-37025
HIGH
McAfee Security Scan Plus < 4.1.262.1 - Privilege Escalation via Configuration File Tampering
CVSS 7.8
CVE-2022-37002
CRITICAL
Huawei EMUI - Privilege Escalation in SystemUI Module
CVSS 9.8
CVE-2022-31672
HIGH
VMware vRealize Operations 8.0.0-8.6.4 - Privilege Escalation to Root
CVSS 7.2
CVE-2022-20361
CRITICAL
Android - Remote Privilege Escalation via Bluetooth Cross-Transport Key Derivation Weakness
CVSS 9.8
CVE-2022-20360
HIGH
Android - Local Privilege Escalation via SecureNfcPreferenceController
CVSS 7.8
CVE-2022-20356
HIGH
Android 11-12L - Local Privilege Escalation via ActiveServices Foreground Service Validation
CVSS 7.8
CVE-2022-20347
HIGH
Android - Remote Privilege Escalation via ConnectedDeviceDashboardFragment
CVSS 8.8
CVE-2022-20239
CRITICAL
Android - Improper Privilege Management via remap_pfn_range
CVSS 9.8
CVE-2022-35782
MEDIUM
Azure Site Recovery - Privilege Escalation
CVSS 6.5
CVE-2022-35781
MEDIUM
Azure Site Recovery - Privilege Escalation
CVSS 6.5
CVE-2022-35780
MEDIUM
Azure Site Recovery - Privilege Escalation
CVSS 6.5
CVE-2022-35775
MEDIUM
Azure Site Recovery - Privilege Escalation
CVSS 6.5
CVE-2022-35774
MEDIUM
Azure Site Recovery - Privilege Escalation
CVSS 4.9
CVE-2022-35771
HIGH
Windows Defender < - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities
2,834
Exploit Likelihood
Medium