Improper Check for Dropped Privileges

Every one of the 46 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Privilege escalation vulnerabilityCVE-2024-38813VMware · CVSS 7.5 · 17% likely

   VMware

2. ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root priv…CVE-2011-2921ktsuss · 83% likely
3. AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-10494…CVE-2017-6972Alienvault · 15% likely

   Alienvault

4. An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.CVE-2024-25420Igniterealtime · CVSS 7.2 · 6.5% likely

   Igniterealtime

5. libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.CVE-2015-0278Libuv Project · 3.2% likely
6. An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop…CVE-2019-18276Gnu · CVSS 7.8 · 2.6% likely

   GNU

7. Original block tokens are persisted and can be retrievedCVE-2021-36372Apache Software Foundation · 2.5% likely

   Apache

8. SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.CVE-2020-24361Snmptt · 2.1% likely
9. masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.CVE-2011-3350masqmail · 1.7% likely

   Masqmail

10. Bitlbee does not drop extra group privileges correctly in unix.cCVE-2012-1187Bitlbee · 1.6% likely

    Bitlbee

11. Improper access to dataset metadata informationCVE-2021-37839Apache Software Foundation · 1.4% likely

    Apache

12. An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard C…CVE-2018-8599Microsoft · 1.0% likely

    Microsoft

13. Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.CVE-2023-34844Play With Docker Project · 0.9% likely
14. Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces…CVE-2024-8382Mozilla · CVSS 8.8 · 0.6% likely

    Mozilla

15. In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges…CVE-2019-20044Zsh · 0.5% likely

    Zsh

16. netfilter: nft_ct: skip expectations for confirmed conntrackCVE-2021-47129Linux · CVSS 7.8 · 0.4% likely

    Linux

17. A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to…CVE-2025-27396Siemens · CVSS 8.8 · 0.4% likely

    Siemens

18. artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root…CVE-2006-2916Kde · 0.4% likely

    Kde

19. The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)…CVE-2020-14300Docker · 0.4% likely

    Docker

20. ktrace(2) privilege incorrectly validated in jailsCVE-2026-58086FreeBSD · CVSS 8.1 · 0.4% likely

    Freebsd

21. Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote…CVE-2026-86385Dell · CVSS 8.8 · 0.4% likely

    Dell

22. A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files i…CVE-2022-0358Qemu · 0.3% likely

    Qemu

23. The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which…CVE-2020-14298Docker · 0.3% likely

    Docker

24. Keycloak: impersonation via logout token exchangeCVE-2023-0657Red Hat · CVSS 3.4 · 0.3% likely

    Red Hat

25. Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way C…CVE-2021-3982Gnome · 0.3% likely

    Gnome

26. seteuid failure ignored in auth modulesCVE-2026-44073Netatalk · CVSS 4 · 0.3% likely

    Netatalk

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.