CWE-268 · weakness in Access Control
Privilege Chaining
21 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.
- Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
- Local Privilege Escalation in snapd
- It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned b…
- A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. To expl…
- Privilege Chaining in GitLab
- Privilege Chaining in GitLab
- Sysadmin can override existing configs & bypass restrictions like EnableUploads
- IBM WebSphere Application Server Liberty bypass security
- OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it t…
- Privilege Chaining in cockpit-hq/cockpit
- Privilege Chaining in hestiacp/hestiacp
- Harden-Runner Evasion of 'disable-sudo' policy
- Privilege Chaining in Delphix
- A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployme…
- Privilege Management for Windows – Elevation of Privilege
- Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed wit…
- Cisco Unified Communications Products Privilege Escalation Vulnerability
- Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability
- QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected produ…
- Privilege Management for Windows - Elevation of Privilege
- Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the se…
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.