Skip to content
BackEsc
Sign in

CWE-279 · weakness in Access Control

Incorrect Execution-Assigned Permissions

25 CVEs

Out of date: the sync last ran 3 hours ago. Newer CVEs and scores may be missing from the map.

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

Every one of the 25 is a mark on the map. Named now: 1 to 25, most at risk first.

  1. Privilage Escalation in Saphira ConnectCVE-2023-4665Saphira · CVSS 8.8 · 1.1% likely

    Saphira

  2. An issue in OpenEMR 7.0.2 allows a remote attacker to escalate privileges viaa crafted POST request using the noteid parameter.CVE-2024-37734Open-Emr · CVSS 9.8 · 0.8% likely

    Open-Emr

  3. Elastic X-Pack Security versions prior to 5.4.1 and 5.3.3 did not always correctly apply Document Level Security to index aliases. This bug could allow a user with restricted perm…CVE-2017-8441Elastic · 0.7% likely

    Elastic

  4. A Privilege Escalation issue in the inter-process communication procedure from GOG Galaxy (Beta) 2.0.67.2 through v2.0.71.2 allows authentictaed users to change the DACL of arbitr…CVE-2023-50914CVSS 6.7 · 0.7% likely
  5. Incorrect Execution-Assigned Permissions in GitLabCVE-2023-3915GitLab · CVSS 6.5 · 0.7% likely

    GitLab

  6. Apache StreamPark: Authenticated users can trigger remote command executionCVE-2025-30001Apache Software Foundation · CVSS 7.3 · 0.6% likely

    Apache

  7. Nfs-utils: rpc.mountd in the nfs-utils privilege escalationCVE-2025-12801Red Hat · CVSS 6.5 · 0.5% likely

    Red Hat

  8. outdated entries in permissions profiles for /var/lib/pcp/tmp/* may cause security issuesCVE-2020-8025SUSE · CVSS 6.1 · 0.5% likely

    SUSE

  9. Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictionsCVE-2025-14025Red Hat · CVSS 8.5 · 0.4% likely

    Red Hat

  10. Coder's privilege escalation vulnerability could lead to a cross workspace compromiseCVE-2025-58437coder · CVSS 8.1 · 0.4% likely

    Coder

  11. MicroWorld eScan Anti-Virus runasroot incorrect execution-assigned permissionsCVE-2023-4383MicroWorld · CVSS 7.8 · 0.3% likely

    MicroWorld

  12. Incorrect execution-assigned permissions in the Linux kernel mode driver for the Intel(R) 800 Series Ethernet Driver before version 1.15.4 may allow an authenticated user to poten…CVE-2024-39286Intel(R) 800 Series Ethernet Driver · CVSS 3.3 · 0.2% likely
  13. Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of…CVE-2025-20612Edge Orchestrator software for Intel(R) Tiber™ Edge Platform · CVSS 5.5 · 0.2% likely
  14. Incorrect Execution-Assigned Permissions in IBM Aspera FaspexCVE-2025-36228IBM · CVSS 3.8 · 0.2% likely

    IBM

  15. Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of…CVE-2025-23233Edge Orchestrator software for Intel(R) Tiber™ Edge Platform · CVSS 3.5 · 0.2% likely
  16. NVIDIA DOCA-Host and Mellanox OFED contain a vulnerability in the VGT+ feature, where an attacker on a VM might cause escalation of privileges and denial of service on the VLAN.CVE-2025-23263NVIDIA · CVSS 7.6 · 0.2% likely

    NVIDIA

  17. containerd affected by a local privilege escalation via wide permissions on CRI directoryCVE-2024-25621containerd · CVSS 7.3 · 0.2% likely

    Containerd

  18. Open Automation Software Incorrect Execution-Assigned PermissionsCVE-2024-11220Open Automation Software · CVSS 7.8 · 0.2% likely

    Open Automation Software

  19. Incorrect execution-assigned permissions in some Intel(R) Advanced Link Analyzer Standard Edition software installer before version 23.1.1 may allow an authenticated user to poten…CVE-2024-37025Intel(R) Advanced Link Analyzer Standard Edition software installer · CVSS 6.7 · 0.1% likely
  20. Incorrect execution-assigned permissions for some Edge Orchestrator software for Intel(R) Tiber™ Edge Platform may allow an authenticated user to potentially enable escalation of…CVE-2025-22843Edge Orchestrator software for Intel(R) Tiber™ Edge Platform · CVSS 7.8 · 0.1% likely
  21. A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local attacker with administr…CVE-2026-20062Cisco · CVSS 7.2 · 0.1% likely

    Cisco

  22. Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorizationCVE-2026-4948Red Hat · CVSS 5.5 · 0.1% likely

    Red Hat

  23. osquery: Unprivileged users can temporarily read file carve contentsCVE-2026-46388osquery · CVSS 4.4 · 0.1% likely

    Osquery

  24. Quartus Prime Pro Edition Installer AdvisoryCVE-2025-13663Altera · CVSS 6.7 · 0.1% likely

    Altera

  25. In dump of WindowManagerService.java, there is a possible way of running dumpsys without the required permission due to a missing permission check. This could lead to local escala…CVE-2025-26422Google · CVSS 4 · 0.1% likely

    Google

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in