CWE-250 · weakness in Access Control
Execution with Unnecessary Privileges
369 CVEs
Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
- likely to be exploited
- 2
Every one of the 369 is a mark on the map. Named now: 1 to 26, most at risk first.
- Incorrect authorization controls in PaperCut NG/MF APIs
- Unauthenticated Privilege Escalation in ServiceNow AI Platform
- Incorrect privileges management and insufficient path filtering allow to read arbitrary file on the server via the cpdavd attachment download endpoints.
- Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation
- If an attacker can get a user to open a specially prepared directory tree as a workspace in Visual Studio Code with the CodeQL extension active, arbitrary code of the attacker's c…
- Execution with Unnecessary Privileges in polonel/trudesk
- Hardy Barth cPH2 eCharge Ladestation v1.87.0 and earlier is vulnerable to Execution with Unnecessary Privileges.
- Apache Airflow: Airflow "Run task" feature allows execution with unnecessary priviledges
- Openshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy
- Cisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability
- Privilege Escalation vulnerability
- Nagios Log Server < 2024R2.0.3 Logstash Process Root Privileges
- 3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
- In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface methods.
- Apache Airflow: Authenticated DAG authors could execute code on scheduler nodes
- OpenClinic GA
- An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.
- TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg function.
- A vulnerability was found in the HCI sockets implementation due to a missing capability check in net/bluetooth/hci_sock.c in the Linux Kernel. This flaw allows an attacker to unau…
- Execution with Unnecessary Privileges in JupyterApp
- Execution with Unnecessary Privileges
- Winlogon Elevation of Privilege Vulnerability
- RCE in Saphira Connect
- Imperva SecureSphere running v13.0, v12.0, or v11.5 allows low privileged users to add SSH login keys to the admin user, resulting in privilege escalation.
- A vulnerability that allows an attacker in possession of the Veeam ONE Agent service account credentials to perform remote code execution on the machine where the Veeam ONE Agent…
- Execution with Unnecessary Privileges in GitLab
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.