CWE-269: Improper Privilege Management, page 56

The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.

What the weakness is: CWE-269 at MITRE

1. 7.2CVE-2022-26251EPSS 1.9%2022-04-06

   The HTTP interface of Synaman v5.1 and below was discovered to allow authenticated attackers to execute arbitrary code and escalate privileges.

2. 7.8CVE-2021-39784EPSS 0.1%2022-03-30

   In CellBroadcastReceiver, there is a possible path to enable specific cellular features due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is…

3. 7.8CVE-2021-39783EPSS 0.1%2022-03-30

   In rcsservice, there is a possible way to modify TTY mode due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed for exploitation.P…

4. 7.8CVE-2021-39782EPSS 0.1%2022-03-30

   In Telephony, there is a possible unauthorized modification of the PLMN SIM file due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not ne…

5. 8.8CVE-2021-39772EPSS 0.2%2022-03-30

   In Bluetooth, there is a possible way to access the a2dp audio control switch due to a missing permission check. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not neede…

6. 9.8CVE-2003-5001EPSS 1.0%2022-03-28

   A vulnerability was found in ISS BlackICE PC Protection and classified as critical. Affected by this issue is the component Cross Site Scripting Detection. The manipulation as part of POST/PUT/DELETE/OPTIONS Request leads to privilege esca…

7. 10.0CVE-2022-24783EPSS 1.1%2022-03-25

   Deno is a runtime for JavaScript and TypeScript. The versions of Deno between release 1.18.0 and 1.20.2 (inclusive) are vulnerable to an attack where a malicious actor controlling the code executed in a Deno runtime could bypass all permis…

8. 4.9CVE-2022-1003EPSS 0.5%2022-03-18

   One of the API in Mattermost version 6.3.0 and earlier fails to properly protect the permissions, which allows the system administrators to combine the two distinct privileges/capabilities in a way that allows them to override certain rest…

9. 9.8CVE-2022-24637ExploitEPSS 99.0%2022-03-18

   Open Web Analytics (OWA) before 1.7.4 allows an unauthenticated remote attacker to obtain sensitive user information, which can be used to gain admin privileges by leveraging cache hashes. This occurs because files generated with '<?php (i…

10. 6.1CVE-2022-24072EPSS 0.6%2022-03-17

    The devtools API in Whale browser before 3.12.129.18 allowed extension developers to inject arbitrary JavaScript into the extension store web page via devtools.inspectedWindow, leading to extensions downloading and uploading when users ope…

11. 7.8CVE-2022-22141EPSS 0.2%2022-03-11

    'Long-term Data Archive Package' service implemented in the following Yokogawa Electric products creates some named pipe with imporper ACL configuration. CENTUM CS 3000 versions from R3.08.10 to R3.09.00, CENTUM VP versions from R4.01.00 t…

12. 7.8CVE-2022-24750EPSS 0.3%2022-03-10

    UltraVNC is a free and open source remote pc access software. A vulnerability has been found in versions prior to 1.3.8.0 in which the DSM plugin module, which allows a local authenticated user to achieve local privilege escalation (LPE) o…

13. 7.8CVE-2022-24931EPSS 0.1%2022-03-10

    Improper access control vulnerability in dynamic receiver in ApkInstaller prior to SMR MAR-2022 Release allows unauthorized attackers to execute arbitrary activity without a proper permission

14. 5.5CVE-2022-20051EPSS 0.1%2022-03-10

    In ims service, there is a possible unexpected application behavior due to incorrect privilege assignment. This could lead to local denial of service with no additional execution privileges needed. User interaction is not needed for exploi…

15. 7.8CVE-2022-23296EPSS 0.7%2022-03-09

    Windows Installer Elevation of Privilege Vulnerability

16. 7.3CVE-2022-25311EPSS 0.5%2022-03-08

    A vulnerability has been identified in SINEC NMS (All versions >= V1.0.3 < V2.0), SINEC NMS (All versions < V1.0.3), SINEMA Server V14 (All versions). The affected software do not properly check privileges between users during the same web…

17. 7.8CVE-2022-24408EPSS 0.2%2022-03-08

    A vulnerability has been identified in SINUMERIK MC (All versions < V1.15 SP1), SINUMERIK ONE (All versions < V6.15 SP1). The sc SUID binary on affected devices provides several commands that are used to execute system commands or modify s…

18. 9.8CVE-2022-0441ExploitEPSS 85%2022-03-07

    The MasterStudy LMS WordPress plugin before 2.7.6 does to validate some parameters given when registering a new account, allowing unauthenticated users to register as an admin

19. 9.8CVE-2022-25089ExploitEPSS 18%2022-03-03

    Printix Secure Cloud Print Management through 1.3.1106.0 incorrectly uses Privileged APIs to modify values in HKEY_LOCAL_MACHINE via UITasks.PersistentRegistryData.

20. 7.8CVE-2022-23921EPSS 0.2%2022-02-25

    Exploitation of this vulnerability may result in local privilege escalation and code execution. GE maintains exploitation of this vulnerability is only possible if the attacker has login access to a machine actively running CIMPLICITY, the…

21. 7.8CVE-2022-25636EPSS 2.6%2022-02-24

    net/netfilter/nf_dup_netdev.c in the Linux kernel 5.4 through 5.6.10 allows local users to gain privileges because of a heap out-of-bounds write. This is related to nf_tables_offload.

22. 7.8CVE-2022-25372EPSS 0.6%2022-02-20

    Pritunl Client through 1.2.3019.52 on Windows allows local privilege escalation, related to an ACL entry for CREATOR OWNER in platform_windows.go.

23. 8.8CVE-2021-39301EPSS 0.4%2022-02-16

    Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

24. 8.8CVE-2021-39300EPSS 0.4%2022-02-16

    Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

25. 8.8CVE-2021-39299EPSS 0.4%2022-02-16

    Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

26. 8.8CVE-2021-39298EPSS 0.4%2022-02-16

    A potential vulnerability in AMD System Management Mode (SMM) interrupt handler may allow an attacker with high privileges to access the SMM resulting in arbitrary code execution which could be used by malicious actors to bypass security m…

27. 8.8CVE-2021-39297EPSS 0.4%2022-02-16

    Potential vulnerabilities have been identified in UEFI firmware (BIOS) for some PC products which may allow escalation of privilege and arbitrary code execution.

28. 7.2CVE-2022-23604EPSS 1.1%2022-02-15

    x26-Cogs is a repository of cogs made by Twentysix for the Red Discord bot. Among these cogs is the Defender cog, a tool for Discord server moderation. A vulnerability in the Defender cog prior to version 1.10.0 allows users with admin pri…

29. 7.8CVE-2022-25150EPSS 0.5%2022-02-14

    In Malwarebytes Binisoft Windows Firewall Control before 6.8.1.0, programs executed from the Tools tab can be used to escalate privileges.

30. 9.8CVE-2022-24927EPSS 0.3%2022-02-11

    Improper privilege management vulnerability in Samsung Video Player prior to version 7.3.15.30 allows attackers to execute video files without permission.

31. 9.8CVE-2021-22801EPSS 1.6%2022-02-11

    A CWE-269: Improper Privilege Management vulnerability exists that could cause an arbitrary command execution when the software is configured with specially crafted event actions. Affected Product: ConneXium Network Manager Software (All V…

32. 9.9CVE-2021-36302EPSS 0.9%2022-02-09

    All Dell EMC Integrated System for Microsoft Azure Stack Hub versions contain a privilege escalation vulnerability. A remote malicious user with standard level JEA credentials may potentially exploit this vulnerability to elevate privilege…

33. 6.5CVE-2021-3813EPSS 1.1%2022-02-09

    Improper Privilege Management in GitHub repository chatwoot/chatwoot prior to v2.2.

34. 7.8CVE-2021-37852EPSS 0.6%2022-02-09

    ESET products for Windows allows untrusted process to impersonate the client of a pipe, which can be leveraged by attacker to escalate privileges in the context of NT AUTHORITY\SYSTEM.

35. 8.8CVE-2022-22509EPSS 1.0%2022-02-02

    In Phoenix Contact FL SWITCH Series 2xxx in version 3.00 an incorrect privilege assignment allows an low privileged user to enable full access to the device configuration.

36. 5.4CVE-2021-45729EPSS 0.7%2022-01-25

    The Privilege Escalation vulnerability discovered in the WP Google Map WordPress plugin (versions <= 1.8.0) allows authenticated low-role users to create, edit, and delete maps.

37. 8.8CVE-2021-45222EPSS 1.5%2022-01-24

    An issue was discovered in COINS Construction Cloud 11.12. Due to logical flaws in the human ressources interface, it is vulnerable to privilege escalation by HR personnel.

38. 8.8CVE-2022-21699EPSS 0.7%2022-01-19

    IPython (Interactive Python) is a command shell for interactive computing in multiple programming languages, originally developed for the Python programming language. Affected versions are subject to an arbitrary code execution vulnerabili…

39. 6.5CVE-2022-0090EPSS 1.3%2022-01-18

    An issue has been discovered affecting GitLab versions prior to 14.4.5, between 14.5.0 and 14.5.3, and between 14.6.0 and 14.6.1. GitLab is configured in a way that it doesn't ignore replacement references with git sub-commands, allowing a…

40. 7.8CVE-2021-34998EPSS 0.4%2022-01-13

    This vulnerability allows local attackers to escalate privileges on affected installations of Panda Security Free Antivirus 20.2.0.0. An attacker must first obtain the ability to execute low-privileged code on the target system in order to…

41. 8.6CVE-2021-43860EPSS 1.3%2022-01-12

    Flatpak is a Linux application sandboxing and distribution framework. Prior to versions 1.12.3 and 1.10.6, Flatpak doesn't properly validate that the permissions displayed to the user for an app at install time match the actual permissions…

42. 8.1CVE-2021-42562EPSS 1.2%2022-01-12

    An issue was discovered in CALDERA 2.8.1. It does not properly segregate user privileges, resulting in non-admin users having access to read and modify configuration or other components that should only be accessible by admin users.

43. 6.1CVE-2022-21970EPSS 2.5%2022-01-11

    Microsoft Edge (Chromium-based) Elevation of Privilege Vulnerability

44. 7.8CVE-2022-21902EPSS 0.7%2022-01-11

    Windows DWM Core Library Elevation of Privilege Vulnerability

45. 7.1CVE-2022-0144EPSS 0.4%2022-01-11

    shelljs is vulnerable to Improper Privilege Management

46. 3.3CVE-2022-22266EPSS 0.1%2022-01-10

    (Applicable to China models only) Unprotected WifiEvaluationService in TencentWifiSecurity application prior to SMR Jan-2022 Release 1 allows untrusted applications to get WiFi information without proper permission.

47. 5.5CVE-2022-22263EPSS 0.10%2022-01-10

    Unprotected dynamic receiver in SecSettings prior to SMR Jan-2022 Release 1 allows untrusted applications to launch arbitrary activity.

48. 7.8CVE-2021-45440EPSS 0.5%2022-01-10

    A unnecessary privilege vulnerability in Trend Micro Apex One and Trend Micro Worry-Free Business Security 10.0 SP1 (on-prem versions only) could allow a local attacker to abuse an impersonation privilege and elevate to a higher level of p…

49. 7.8CVE-2021-41388EPSS 0.2%2022-01-04

    Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low…

50. 7.8CVE-2021-31833EPSS 0.3%2022-01-04

    Potential product security bypass vulnerability in McAfee Application and Change Control (MACC) prior to version 8.3.4 allows a locally logged in attacker to circumvent the application solidification protection provided by MACC, permitting…