Skip to content

CWE-268 · weakness in Access Control

Privilege Chaining

21 CVEs

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

  1. Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityCVE-2025-49741Microsoft · CVSS 7.4 · 3.9% likely

    Microsoft

  2. Local Privilege Escalation in snapdCVE-2026-3888Canonical · CVSS 7.8 · 1.4% likelycovered by CyberSIXT

    Canonical

  3. It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned b…CVE-2019-3844[freedesktop.org] · CVSS 4.5 · 0.9% likely
  4. A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. To expl…CVE-2023-20194Cisco · CVSS 4.9 · 0.7% likely

    Cisco

  5. Privilege Chaining in GitLabCVE-2024-1299GitLab · CVSS 6.5 · 0.7% likely

    GitLab

  6. Privilege Chaining in GitLabCVE-2024-1250GitLab · CVSS 6.5 · 0.5% likely

    GitLab

  7. Sysadmin can override existing configs & bypass restrictions like EnableUploadsCVE-2022-1003Mattermost · CVSS 3.3 · 0.5% likely

    Mattermost

  8. IBM WebSphere Application Server Liberty bypass securityCVE-2025-36124IBM · CVSS 5.9 · 0.5% likely

    IBM

  9. OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it t…CVE-2024-4877OpenVPN · CVSS 8.8 · 0.4% likely

    OpenVPN

  10. Privilege Chaining in cockpit-hq/cockpitCVE-2023-0759cockpit-hq · CVSS 5.3 · 0.3% likely

    Cockpit HQ

  11. Privilege Chaining in hestiacp/hestiacpCVE-2023-5839hestiacp · CVSS 8.8 · 0.3% likely

    Hestiacp

  12. Harden-Runner Evasion of 'disable-sudo' policyCVE-2025-32955step-security · CVSS 6 · 0.2% likely

    Step-Security

  13. Privilege Chaining in DelphixCVE-2025-2903Perforce · CVSS 8.5 · 0.2% likely

    Perforce

  14. A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployme…CVE-2023-2250Linuxfoundation · CVSS 6.7 · 0.2% likely

    Linuxfoundation

  15. Privilege Management for Windows – Elevation of PrivilegeCVE-2025-0889BeyondTrust · CVSS 7.2 · 0.2% likely

    BeyondTrust

  16. Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed wit…CVE-2024-47045National Tax Agency · CVSS 7.8 · 0.1% likely

    National Tax Agency

  17. Cisco Unified Communications Products Privilege Escalation VulnerabilityCVE-2025-20112Cisco · CVSS 5.1 · 0.1% likely

    Cisco

  18. Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation VulnerabilityCVE-2025-7973Rockwell Automation · CVSS 8.5 · 0.1% likely

    Rockwell Automation

  19. QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected produ…CVE-2025-64701QualitySoft Corporation · CVSS 8.5 · 0.1% likely

    QualitySoft Corporation

  20. Privilege Management for Windows - Elevation of PrivilegeCVE-2025-2297BeyondTrust · CVSS 7.2 · 0.1% likely

    BeyondTrust

  21. Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the se…CVE-2026-32325Fsas Technologies Inc. · CVSS 8.5 · 0.1% likely

    Fsas Technologies Inc.

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.