The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,835 vulnerabilities with CWE-269
CVE-2021-36293
MEDIUM
Dell VNX2 for File <8.1.21.266 - Privilege Escalation
CVSS 6.4
CVE-2021-36290
MEDIUM
Dell VNX2 for File <8.1.21.266 - Privilege Escalation
CVSS 6.4
CVE-2021-39784
HIGH
Android 12L - Local Privilege Escalation via CellBroadcastReceiver Missing Permission Check
CVSS 7.8
CVE-2021-39783
HIGH
Android 12L - Local Privilege Escalation via rcsservice TTY Mode Modification
CVSS 7.8
CVE-2021-39782
HIGH
Android 12L - Unauthorized PLMN SIM File Modification due to Missing Permission Check
CVSS 7.8
CVE-2021-39772
HIGH
Android 12L - Local Privilege Escalation via Bluetooth A2DP Audio Control
CVSS 8.8
CVE-2021-22801
CRITICAL
ConneXium Network Manager - Improper Privilege Management leading to Arbitrary Command Execution
CVSS 9.8
CVE-2021-36302
CRITICAL
Dell Emc Integrated System For Microsoft Azure Stack Hub Firmware < 2204 - Improper Privilege Management
CVSS 9.9
CVE-2021-3813
MEDIUM
GitHub chatwoot/chatwoot < 2.2 - Privilege Escalation
CVSS 6.5
CVE-2021-37852
HIGH
ESET Endpoint Antivirus 6.6.2046.0-7.3.2055.0 - Privilege Escalation via Pipe Impersonation
CVSS 7.8
CVE-2021-45729
MEDIUM
WP Google Map <1.8.0 - Privilege Escalation
CVSS 5.4
CVE-2021-45222
HIGH
COINS Construction Cloud 11.12 - Privilege Escalation via HR Interface
CVSS 8.8
CVE-2021-34998
HIGH
Panda Security Free Antivirus 20.2.0.0 - Privilege Escalation
CVSS 7.8
CVE-2021-43860
HIGH
Flatpak <1.12.3-1.10.6 - Privilege Escalation
CVSS 8.2
CVE-2021-42562
HIGH
MITRE Caldera < 2.8.1 - Improper Privilege Management
CVSS 8.1
CVE-2021-45440
HIGH
Trend Micro Apex One and Worry-Free Business Security 10.0 SP1 - Privilege Escalation via Impersonation Abuse
CVSS 7.8
CVE-2021-41388
HIGH
Netskope < 89 - Local Privilege Escalation via XPC Service Connection
CVSS 7.8
CVE-2021-31833
HIGH
McAfee Application and Change Control < 8.3.4 - Privilege Escalation via Binary Renaming
CVSS 7.1
CVE-2021-39982
CRITICAL
HarmonyOS - Improper Privilege Management via Phone Manager Notification Tampering
CVSS 9.1
CVE-2021-43858
HIGH
MinIO <RELEASE.2021-12-27T07-23-18Z - Privilege Escalation
CVSS 8.8
CVE-2021-21750
HIGH
ZTE ZXIN10 CMS < 3.01.01.04 - Privilege Escalation via Timed Task Modification
CVSS 7.8
CVE-2021-21911
HIGH
Advantech R-SeeNet 2.4.15 - Privilege Escalation via File Replacement
CVSS 7.8
CVE-2021-27445
HIGH
Mesa Labs AmegaView <3.0 - Privilege Escalation
CVSS 7.8
CVE-2021-36316
MEDIUM
Dell EMC Avamar Server <19.4 - Privilege Escalation
CVSS 6.7
CVE-2021-43835
HIGH
Sulu <2.2.18, <2.3.8, <2.4.0 - Privilege Escalation
CVSS 7.2
Details
Vulnerabilities
2,835
Exploit Likelihood
Medium