CWE-268 · Access Control
Privilege Chaining
21CVEs
SortMost likely exploited
21 CVEs with CWE-268 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-49741Microsoft Edge (Chromium-based) Information Disclosure VulnerabilityMicrosoft · Microsoft Edge (Chromium-based) · CVSS 7.4 · 2025-07-01 | 7.4 | 3.9% | 2025-07-01 |
| CVE-2026-3888Local Privilege Escalation in snapdCanonical · Ubuntu 16.04 LTS · CVSS 7.8 · 2026-03-17 | 7.8 | 1.4% | 2026-03-17 |
| CVE-2019-3844It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which would allow to create binaries owned b…[freedesktop.org] · systemd · CVSS 4.5 · 2019-04-26 | 4.5 | 0.9% | 2019-04-26 |
| CVE-2023-20194A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operating system of an affected device. To expl…Cisco · Cisco Identity Services Engine Software · CVSS 4.9 · 2023-09-07 | 4.9 | 0.7% | 2023-09-07 |
| CVE-2024-1299Privilege Chaining in GitLabGitLab · GitLab · CVSS 6.5 · 2024-03-07 | 6.5 | 0.7% | 2024-03-07 |
| CVE-2024-1250Privilege Chaining in GitLabGitLab · GitLab · CVSS 6.5 · 2024-02-12 | 6.5 | 0.5% | 2024-02-12 |
| CVE-2022-1003Sysadmin can override existing configs & bypass restrictions like EnableUploadsMattermost · Mattermost · CVSS 3.3 · 2022-03-18 | 3.3 | 0.5% | 2022-03-18 |
| CVE-2025-36124IBM WebSphere Application Server Liberty bypass securityIBM · WebSphere Application Server Liberty · CVSS 5.9 · 2025-08-12 | 5.9 | 0.5% | 2025-08-12 |
| CVE-2024-4877OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI component would connect to allowing it t…OpenVPN · OpenVPN · CVSS 8.8 · 2025-04-03 | 8.8 | 0.4% | 2025-04-03 |
| CVE-2023-0759Privilege Chaining in cockpit-hq/cockpitcockpit-hq · cockpit-hq/cockpit · CVSS 5.3 · 2023-02-09 | 5.3 | 0.3% | 2023-02-09 |
| CVE-2023-5839Privilege Chaining in hestiacp/hestiacphestiacp · hestiacp/hestiacp · CVSS 8.8 · 2023-10-29 | 8.8 | 0.3% | 2023-10-29 |
| CVE-2025-32955Harden-Runner Evasion of 'disable-sudo' policystep-security · harden-runner · CVSS 6 · 2025-04-21 | 6.0 | 0.2% | 2025-04-21 |
| CVE-2025-2903Privilege Chaining in DelphixPerforce · Delphix · CVSS 8.5 · 2025-04-17 | 8.5 | 0.2% | 2025-04-17 |
| CVE-2023-2250A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration-controller or cluster-manager deployme…Linuxfoundation · MCE · CVSS 6.7 · 2023-04-24 | 6.7 | 0.2% | 2023-04-24 |
| CVE-2025-0889Privilege Management for Windows – Elevation of PrivilegeBeyondTrust · Privilege Management for Windows · CVSS 7.2 · 2025-02-26 | 7.2 | 0.2% | 2025-02-26 |
| CVE-2024-47045Privilege chaining issue exists in the installer of e-Tax software(common program). If this vulnerability is exploited, a malicious DLL prepared by an attacker may be executed wit…National Tax Agency · The installer of e-Tax software(common program) · CVSS 7.8 · 2024-09-26 | 7.8 | 0.1% | 2024-09-26 |
| CVE-2025-20112Cisco Unified Communications Products Privilege Escalation VulnerabilityCisco · Cisco Emergency Responder · CVSS 5.1 · 2025-05-21 | 5.1 | 0.1% | 2025-05-21 |
| CVE-2025-7973Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation VulnerabilityRockwell Automation · FactoryTalk® ViewPoint · CVSS 8.5 · 2025-08-14 | 8.5 | 0.1% | 2025-08-14 |
| CVE-2025-64701QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a Windows system with the affected produ…QualitySoft Corporation · QND Premium/Advance/Standard · CVSS 8.5 · 2025-12-11 | 8.5 | 0.1% | 2025-12-11 |
| CVE-2025-2297Privilege Management for Windows - Elevation of PrivilegeBeyondTrust · Privilege Management for Windows · CVSS 7.2 · 2025-07-28 | 7.2 | 0.1% | 2025-07-28 |
| CVE-2026-32325Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier. If this vulnerability is exploited, a local authenticated attacker who can log in to the se…Fsas Technologies Inc. · ServerView Agents for Windows · CVSS 8.5 · 2026-06-01 | 8.5 | 0.1% | 2026-06-01 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.