CWE-274 · Access Control
Improper Handling of Insufficient Privileges
38CVEs
SortMost likely exploited
38 CVEs with CWE-274 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2021-35534Insufficient Security Control VulnerabilityHitachi Energy · Relion 670 Series · CVSS 7.2 · 2021-11-18 | 7.2 | 1.8% | 2021-11-18 |
| CVE-2025-20156Cisco Meeting Management Client-Server Privilege Escalation VulnerabilityCisco · Cisco Meeting Management · CVSS 9.9 · 2025-01-22 | 9.9 | 1.2% | 2025-01-22 |
| CVE-2023-35928Nextcloud user scoped external storage can be used to gather credentials of other usersnextcloud · security-advisories · CVSS 8.5 · 2023-06-23 | 8.5 | 1.0% | 2023-06-23 |
| CVE-2022-45101Dell PowerScale OneFS 9.0.0.x - 9.4.0.x, contains an Improper Handling of Insufficient Privileges vulnerability in NFS. A remote unauthenticated attacker could potentially exploit…Dell · PowerScale OneFS · CVSS 7.3 · 2023-02-01 | 7.3 | 0.9% | 2023-02-01 |
| CVE-2026-62764Apache Accumulo: A user can trigger a graceful shutdown of services without the relevant system permissionsApache Software Foundation · Apache Accumulo · CVSS 5.7 · 2026-07-17 | 5.7 | 0.8% | 2026-07-17 |
| CVE-2023-39375SiberianCMS - CWE-274: Improper Handling of Insufficient PrivilegesSiberianCMS · SiberianCMS · CVSS 7.5 · 2023-09-26 | 7.5 | 0.8% | 2023-09-26 |
| CVE-2022-0668JFrog Artifactory prior to 7.37.13 is vulnerable to Authentication Bypass, which can lead to Privilege Escalation when a specially crafted request is sent by an unauthenticated us…JFrog · JFrog Artifactory · CVSS 5.3 · 2023-01-08 | 5.3 | 0.7% | 2023-01-08 |
| CVE-2021-32006GateManager information leak for LinkManager UsersSecomea · GateManager · CVSS 5 · 2022-03-07 | 5.0 | 0.6% | 2022-03-07 |
| CVE-2020-7283Privilege Escalation vulnerability in McAfee Total Protection (MTP)McAfee,LLC · McAfee Total Protection (MTP) · CVSS 7.5 · 2020-07-03 | 7.5 | 0.6% | 2020-07-03 |
| CVE-2024-41942JupyterHub has a privilege escalation vulnerability with the `admin:users` scopejupyterhub · jupyterhub · CVSS 7.2 · 2024-08-08 | 7.2 | 0.6% | 2024-08-08 |
| CVE-2024-12666ClassCMS User Management Page admin insufficient privilegesClasscms · ClassCMS · CVSS 4.7 · 2024-12-16 | 4.7 | 0.5% | 2024-12-16 |
| CVE-2022-23511A privilege escalation issue exists within the Amazon CloudWatch Agent for Windows, software for collecting metrics and logs from Amazon EC2 instances and on-premises servers, in…aws · amazon-cloudwatch-agent · CVSS 7.1 · 2022-12-12 | 7.1 | 0.5% | 2022-12-12 |
| CVE-2022-23160Dell PowerScale OneFS, versions 8.2.0-9.3.0, contains an Improper Handling of Insufficient Permissions vulnerability. An remote malicious user could potentially exploit this vulne…Dell · PowerScale OneFS · CVSS 5.4 · 2022-04-12 | 5.4 | 0.5% | 2022-04-12 |
| CVE-2024-21648XWiki has no right protection on rollback actionxwiki · xwiki-platform · CVSS 8 · 2024-01-08 | 8.0 | 0.5% | 2024-01-08 |
| CVE-2022-25782Insufficient privilege checks on object access and updates.Secomea · GateManager · CVSS 5.4 · 2022-05-04 | 5.4 | 0.5% | 2022-05-04 |
| CVE-2020-24676Insecure Windows Services in Symphony PlusABB · ABB Ability™ Symphony® Plus Operations · CVSS 7.8 · 2020-12-22 | 7.8 | 0.4% | 2020-12-22 |
| CVE-2026-33005Apache OpenMeetings: Insufficient checks in FileWebServiceApache Software Foundation · Apache OpenMeetings · CVSS 4.3 · 2026-04-09 | 4.3 | 0.4% | 2026-04-09 |
| CVE-2017-3912McAfee Application Control and Change Control (MACC) - password management security feature bypass (SFB) leading to an authentication bypassMcAfee · McAfee Application Control and Change Control (MACC) · CVSS 4.4 · 2018-09-18 | 4.4 | 0.4% | 2018-09-18 |
| CVE-2020-7289Privilege Escalation vulnerability in MAR for WindowsMcAfee,LLC · McAfee Active Response (MAR) for Windows · CVSS 7.8 · 2020-05-08 | 7.8 | 0.3% | 2020-05-08 |
| CVE-2024-0105NVIDIA ConnectX Firmware contains a vulnerability where an attacker may cause an improper handling of insufficient privileges issue. A successful exploit of this vulnerability may…NVIDIA · ConnectX4 · CVSS 8.9 · 2024-11-01 | 8.9 | 0.3% | 2024-11-01 |
| CVE-2020-7267Privilege Escalation vulnerability through symbolic links in VSELMcAfee,LLC · McAfee VirusScan Enterprise (VSE) for Linux · CVSS 8.8 · 2020-05-08 | 8.8 | 0.3% | 2020-05-08 |
| CVE-2020-7265Privilege Escalation vulnerability through symbolic links in ENSMMcAfee,LLC · McAfee Endpoint Security (ENS) for Mac · CVSS 8.8 · 2020-05-08 | 8.8 | 0.3% | 2020-05-08 |
| CVE-2020-7264Privilege Escalation vulnerability through symbolic links in ENS for WindowsMcAfee,LLC · McAfee Endpoint Security (ENS) for Windows · CVSS 8.8 · 2020-05-08 | 8.8 | 0.3% | 2020-05-08 |
| CVE-2020-7266Privilege Escalation vulnerability through symbolic links in VSE for WindowsMcAfee,LLC · McAfee VirusScan Enterprise (VSE) for Windows · CVSS 8.8 · 2020-05-08 | 8.8 | 0.3% | 2020-05-08 |
| CVE-2020-7290Privilege Escalation vulnerability in MAR for LinuxMcAfee,LLC · McAfee Active Response (MAR) for Linux · CVSS 7.8 · 2020-05-08 | 7.8 | 0.3% | 2020-05-08 |
| CVE-2020-7287Privilege Escalation vulnerability in EDR for LinuxMcAfee,LLC · McAfee Exploit Detection and Response (EDR) for Linux · CVSS 7.8 · 2020-05-08 | 7.8 | 0.3% | 2020-05-08 |
| CVE-2020-7286Privilege Escalation vulnerability in EDR for WindowsMcAfee,LLC · McAfee Exploit Detection and Response (EDR) for Windows · CVSS 7.8 · 2020-05-08 | 7.8 | 0.3% | 2020-05-08 |
| CVE-2020-7285Privilege Escalation vulnerability in MVISION EndpointMcAfee,LLC · McAfee MVISION Endpoint · CVSS 7.8 · 2020-05-08 | 7.8 | 0.3% | 2020-05-08 |
| CVE-2020-7291Privilege Escalation vulnerability MAR for MacMcAfee,LLC · McAfee Active Response (MAR) for Mac · CVSS 7.8 · 2020-05-08 | 7.8 | 0.3% | 2020-05-08 |
| CVE-2020-7288Privilege Escalation vulnerability in EDR for MacMcAfee,LLC · McAfee Exploit Detection and Response (EDR) for Mac · CVSS 7.8 · 2020-05-08 | 7.8 | 0.3% | 2020-05-08 |
| CVE-2025-31275A permissions issue was addressed with additional restrictions. This issue is fixed in macOS Sequoia 15.6. A sandboxed process may be able to launch any installed app.Apple · macOS · CVSS 6.2 · 2025-07-29 | 6.2 | 0.2% | 2025-07-29 |
| CVE-2025-54511Improper handling of insufficient privileges in the AMD Secure Processor (ASP) could allow an attacker to provide an input value to a function without sufficient privileges and su…AMD · MI-25 · CVSS 5.3 · 2026-05-15 | 5.3 | 0.2% | 2026-05-15 |
| CVE-2023-20516Improper handling of insufficiency privileges in the ASP could allow a privileged attacker to modify Translation Map Registers (TMRs) potentially resulting in loss of confidential…AMD · AMD Instinct™ MI250 · CVSS 3.3 · 2025-09-06 | 3.3 | 0.2% | 2025-09-06 |
| CVE-2018-6674Privilege escalation vulnerability in McAfee VSE when McTray run with elevated privilegesMcAfee, LLC · VirusScan Enterprise (VSE) · CVSS 6.8 · 2018-05-25 | 6.8 | 0.2% | 2018-05-25 |
| CVE-2025-20177Cisco IOS XR Software Image Verification Bypass VulnerabilityCisco · Cisco IOS XR Software · CVSS 6.7 · 2025-03-12 | 6.7 | 0.2% | 2025-03-12 |
| CVE-2023-32494Dell PowerScale OneFS, 8.0.x-9.5.x, contains an improper handling of insufficient privileges vulnerability. A local privileged attacker could potentially exploit this vulnerabilit…Dell · PowerScale OneFS · CVSS 6.7 · 2023-08-16 | 6.7 | 0.2% | 2023-08-16 |
| CVE-2024-0106NVIDIA ConnectX Host Firmware for the BlueField Data Processing Unit (DPU) contains a vulnerability where an attacker may cause an improper handling of insufficient privileges iss…NVIDIA · BlueField 1 · CVSS 8.7 · 2024-11-01 | 8.7 | 0.2% | 2024-11-01 |
| CVE-2024-20324A vulnerability in the CLI of Cisco IOS XE Software could allow an authenticated, low-privileged, local attacker to access WLAN configuration details including passwords. This vul…Cisco · Cisco IOS XE Software · CVSS 5.5 · 2024-03-27 | 5.5 | 0.1% | 2024-03-27 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.