CWE-271 · Access Control
Privilege Dropping / Lowering Errors
11CVEs
SortMost likely exploited
11 CVEs with CWE-271 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-0985PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLPostgresql · PostgreSQL · CVSS 8 · 2024-02-08 | 8.0 | 1.8% | 2024-02-08 |
| CVE-2019-11243In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials removed (bearer token, username/password…Kubernetes · Kubernetes · CVSS 3.1 · 2019-04-22 | 3.1 | 1.7% | 2019-04-22 |
| CVE-2020-35513A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the way user create and delete object using N…Linux · kernel · 2021-01-25 | – | 1.4% | 2021-01-25 |
| CVE-2022-3569Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior, where the 'zimbra' u…Synacor · Zimbra Collaboration Suite (ZCS) · CVSS 7.8 · 2022-10-17 | 7.8 | 0.8% | 2022-10-17 |
| CVE-2024-35179Unprivileged Stalwart Mail Server user can read files as rootstalwartlabs · mail-server · CVSS 6.8 · 2024-05-15 | 6.8 | 0.6% | 2024-05-15 |
| CVE-2023-22648A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the Rancher UI. This woul…SUSE · Rancher · CVSS 8 · 2023-06-01 | 8.0 | 0.5% | 2023-06-01 |
| CVE-2025-23395Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit setNo vendor recorded · CVSS 7.8 · 2025-05-26 | 7.8 | 0.3% | 2025-05-26 |
| CVE-2023-38496Apptainer's ineffective privileges drop when requesting container networkapptainer · apptainer · CVSS 6.1 · 2023-07-25 | 6.1 | 0.3% | 2023-07-25 |
| CVE-2026-35535In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal error and can lead to…Sudo project · Sudo · CVSS 7.4 · 2026-04-03 | 7.4 | 0.2% | 2026-04-03 |
| CVE-2025-53819Nix's privilege dropping to build user broke for macOSNixOS · nix · CVSS 7.9 · 2025-07-14 | 7.9 | 0.1% | 2025-07-14 |
| CVE-2026-25704Incomplete privilege drop for com.system76.CosmicGreeter.GetUserDatapop-os · cosmic-greeter · CVSS 5.8 · 2026-03-30 | 5.8 | 0.1% | 2026-03-30 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.