CWE-273 · Access Control
Improper Check for Dropped Privileges
46CVEs
SortMost likely exploited
46 CVEs with CWE-273 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-38813In CISA KEVExploitedPrivilege escalation vulnerabilityVMware · VMware vCenter Server · CVSS 7.5 · 2024-09-17 | 7.5 | 17% | 2024-09-17 |
| CVE-2011-2921ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root priv…ktsuss · ktsuss · 2019-11-19 | – | 83% | 2019-11-19 |
| CVE-2017-6972AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-10494…Alienvault · Ossim · 2017-03-22 | – | 15% | 2017-03-22 |
| CVE-2024-25420An issue in Ignite Realtime Openfire before 4.8.1 allows a remote attacker to escalate privileges via the admin.authorizedJIDs system property component.Igniterealtime · Openfire · CVSS 7.2 · 2024-03-26 | 7.2 | 6.5% | 2024-03-26 |
| CVE-2015-0278libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors.Libuv Project · Libuv · 2015-05-18 | – | 3.2% | 2015-05-18 |
| CVE-2019-18276An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11. By default, if Bash is run with its effective UID not equal to its real UID, it will drop…Gnu · Bash · CVSS 7.8 · 2019-11-28 | 7.8 | 2.6% | 2019-11-28 |
| CVE-2021-36372Original block tokens are persisted and can be retrievedApache Software Foundation · Apache Ozone · 2021-11-19 | – | 2.5% | 2021-11-19 |
| CVE-2020-24361SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.Snmptt · Snmptt · 2020-08-16 | – | 2.1% | 2020-08-16 |
| CVE-2011-3350masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.masqmail · masqmail · 2019-11-19 | – | 1.7% | 2019-11-19 |
| CVE-2012-1187Bitlbee does not drop extra group privileges correctly in unix.cBitlbee · Bitlbee · 2019-10-29 | – | 1.6% | 2019-10-29 |
| CVE-2021-37839Improper access to dataset metadata informationApache Software Foundation · Apache Superset · 2022-07-06 | – | 1.4% | 2022-07-06 |
| CVE-2018-8599An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file operations, aka "Diagnostics Hub Standard C…Microsoft · Microsoft Visual Studio · 2018-12-12 | – | 1.0% | 2018-12-12 |
| CVE-2023-34844Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.Play With Docker Project · Play With Docker · 2023-06-29 | – | 0.9% | 2023-06-29 |
| CVE-2024-8382Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces…Mozilla · Firefox · CVSS 8.8 · 2024-09-03 | 8.8 | 0.6% | 2024-09-03 |
| CVE-2019-20044In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option. Zsh fails to overwrite the saved uid, so the original privileges…Zsh · Zsh · 2020-02-24 | – | 0.5% | 2020-02-24 |
| CVE-2021-47129netfilter: nft_ct: skip expectations for confirmed conntrackLinux · Linux · CVSS 7.8 · 2024-03-15 | 7.8 | 0.4% | 2024-03-15 |
| CVE-2025-27396A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0). Affected devices do not properly limit the elevation of privileges required to…Siemens · SCALANCE LPE9403 · CVSS 8.8 · 2025-03-11 | 8.8 | 0.4% | 2025-03-11 |
| CVE-2006-2916artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call, which allows local users to gain root…Kde · Arts · 2006-06-15 | – | 0.4% | 2006-06-15 |
| CVE-2020-14300The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://access.redhat.com/errata/RHBA-2020:0053)…Docker · Docker · 2020-07-13 | – | 0.4% | 2020-07-13 |
| CVE-2026-58086ktrace(2) privilege incorrectly validated in jailsFreeBSD · FreeBSD · CVSS 8.1 · 2026-08-19 | 8.1 | 0.4% | 2026-08-19 |
| CVE-2026-86385Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged attacker with remote…Dell · PowerProtect Data Domain · CVSS 8.8 · 2026-10-28 | 8.8 | 0.4% | 2026-10-28 |
| CVE-2022-0358A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation. This flaw is strictly related to CVE-2018-13405. A local guest user can create files i…Qemu · QEMU/virtiofsd · 2022-08-29 | – | 0.3% | 2022-08-29 |
| CVE-2020-14298The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc missing the fix for CVE-2019-5736, which…Docker · Docker · 2020-07-13 | – | 0.3% | 2020-07-13 |
| CVE-2023-0657Keycloak: impersonation via logout token exchangeRed Hat · Red Hat build of Keycloak 22 · CVSS 3.4 · 2024-11-17 | 3.4 | 0.3% | 2024-11-17 |
| CVE-2021-3982Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege escalation issue. An attacker, with low privilege permissions, may take advantage of the way C…Gnome · gnome-shell · 2022-04-29 | – | 0.3% | 2022-04-29 |
| CVE-2026-44073seteuid failure ignored in auth modulesNetatalk · Netatalk · CVSS 4 · 2026-05-21 | 4.0 | 0.3% | 2026-05-21 |
| CVE-2026-101306Multiple jail filesystem root escapesFreeBSD · FreeBSD · CVSS 9.8 · 2026-10-15 | 9.8 | 0.3% | 2026-10-15 |
| CVE-2023-52433netfilter: nft_set_rbtree: skip sync GC for new elements in this transactionLinux · Linux · CVSS 7.8 · 2024-02-20 | 7.8 | 0.3% | 2024-02-20 |
| CVE-2026-60085PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess SandboxMervinPraison · PraisonAI · CVSS 7.5 · 2026-07-15 | 7.5 | 0.3% | 2026-07-15 |
| CVE-2025-1003HP Anyware Agent for Linux – Potential Authentication BypassHP, Inc. · HP Anyware Linux Agent · CVSS 8.5 · 2025-02-03 | 8.5 | 0.2% | 2025-02-03 |
| CVE-2025-62175Mastodon streaming API fails to disconnect disabled and suspended usersmastodon · mastodon · CVSS 4.3 · 2025-10-13 | 4.3 | 0.2% | 2025-10-13 |
| CVE-2026-101305Multiple jail filesystem root escapesFreeBSD · FreeBSD · CVSS 8.8 · 2026-10-15 | 8.8 | 0.2% | 2026-10-15 |
| CVE-2023-34322top-level shadow reference dropped too early for 64-bit PV guestsXen · Xen · CVSS 7.8 · 2024-01-05 | 7.8 | 0.2% | 2024-01-05 |
| CVE-2026-21882theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-executionAsfhtgkDavid · theshit · CVSS 8.4 · 2026-03-02 | 8.4 | 0.2% | 2026-03-02 |
| CVE-2023-5369copy_file_range insufficient capability rights checkFreeBSD · FreeBSD · 2023-10-04 | – | 0.2% | 2023-10-04 |
| CVE-2023-21246In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception. This could lead to local escalation…Google · Android · 2023-07-12 | – | 0.2% | 2023-07-12 |
| CVE-2026-54552sh _uid does not drop supplementary groups (incomplete privilege drop)amoffat · sh · CVSS 7.9 · 2026-08-18 | 7.9 | 0.2% | 2026-08-18 |
| CVE-2023-26239An issue was discovered in WatchGuard EPDR 8.0.21.0002. Due to a weak implementation of a password check, it is possible to obtain credentials to access the management console as…Watchguard · Epp Firmware · 2023-10-05 | – | 0.2% | 2023-10-05 |
| CVE-2026-32107xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid failsneutrinolabs · xrdp · CVSS 8.8 · 2026-04-17 | 8.8 | 0.2% | 2026-04-17 |
| CVE-2026-101304Multiple jail filesystem root escapesFreeBSD · FreeBSD · CVSS 7.1 · 2026-10-15 | 7.1 | 0.1% | 2026-10-15 |
| CVE-2026-61897accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scriptsCanonical · accountsservice · CVSS 7.8 · 2026-08-20 | 7.8 | 0.1% | 2026-08-20 |
| CVE-2026-58089hwpmc fails to detach PMCs during exec credential transitionsFreeBSD · FreeBSD · CVSS 7.8 · 2026-08-26 | 7.8 | 0.1% | 2026-08-26 |
| CVE-2026-49421unlinkat(2) ignores AT_RESOLVE_BENEATH flagFreeBSD · FreeBSD · CVSS 7.1 · 2026-08-19 | 7.1 | 0.1% | 2026-08-19 |
| CVE-2026-80047Hugging Face Transformers library writes remote code to disk prior to consent checkHugging Face · Transformers · CVSS 7.8 · 2026-09-01 | 7.8 | 0.1% | 2026-09-01 |
| CVE-2023-35692In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation. This could lead to local escala…Google · Android · 2023-07-14 | – | 0.1% | 2023-07-14 |
| CVE-2026-0099In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalat…Google · Android · CVSS 7.8 · 2026-06-01 | 7.8 | 0.1% | 2026-06-01 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.