cve.bz

CWE-270: Privilege Context Switching Error

Filter

The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.

What the weakness is: CWE-270 at MITRE. All weaknesses

Related attack patterns (CAPEC): 3
  • CAPEC-17 Using Malicious Files Likelihood: High · Severity: Very High
  • CAPEC-30 Hijacking a Privileged Thread of Execution Likelihood: Low · Severity: Very High
  • CAPEC-35 Leverage Executable Code in Non-Executable Files Likelihood: High · Severity: Very High

The attack patterns MITRE's CAPEC relates to CWE-270, as MITRE names them. Credits.

Ask an AI about CWE-270

ChatGPTClaudeGoogle AI Mode

Show the promptExplain CWE-270: Privilege Context Switching Error and how to prevent and detect it in code. Use https://cwe.mitre.org/data/definitions/270.html and https://cve.bz/cve/cwe/270?via=ask-ai-copy for recent CVEs with this weakness. Cite the sources.

Opens a third-party assistant; its answer is its own, not cve.bz's. The prompt holds only this weakness's id and public links.

  1. 8.8CVE-2026-88200EPSS 0.8%

    Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

  2. 9.4CVE-2026-9560EPSS 0.6%

    Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

  3. 7.5CVE-2026-34853EPSS 0.2%

    Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.

  4. 2.0CVE-2025-55210EPSS 0.4%

    FreePBX is an open-source web-based graphical user interface (GUI) that manages Asterisk. Prior to 17.0.5 and 16.0.17, FreePBX module api (PBX API) is vulnerable to privilege escalation by authenticated users with REST/GraphQL API access. …

  5. 7.8CVE-2025-60721EPSS 0.4%

    Privilege context switching error in Windows Administrator Protection allows an authorized attacker to elevate privileges locally.

  6. 8.1CVE-2025-9408EPSS 0.1%

    System call entry on Cortex M (and possibly R and A, but I think not) has a race which allows very practical privilege escalation for malicious userspace processes.

  7. 6.0CVE-2025-26499EPSS 0.1%

    Under heavy system utilization a random race condition can occur during authentication or token refresh operation. This flaw allows one user to be granted a token intended for another user, resulting in impersonation until the session is e…

  8. 5.6CVE-2025-46406EPSS 0.1%

    A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a privileged Operator with high level access in one Division to perform limited privileged activities across the Division boundary. This issue affects …

  9. 5.1CVE-2025-49583EPSS 0.3%

    XWiki is a generic wiki platform. When a user without script right creates a document with an `XWiki.Notifications.Code.NotificationEmailRendererClass` object, and later an admin edits and saves that document, the email templates in this o…

  10. 8.7CVE-2025-49581EPSS 0.6%

    XWiki is a generic wiki platform. Any user with edit right on a page (could be the user's profile) can execute code (Groovy, Python, Velocity) with programming right by defining a wiki macro. This allows full access to the whole XWiki inst…

  11. 7.9CVE-2024-46975EPSS 0.2%

    Kernel software installed and running inside a Guest VM may exploit memory shared with the GPU Firmware to write data into another Guest's virtualised GPU memory.

  12. 6.7CVE-2024-12570EPSS 0.5%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.4.6, from 17.5 prior to 17.5.4, and from 17.6 prior to 17.6.2. It may have been possible for an attacker with a victim's `CI_JOB_TOKEN` to o…

  13. 8.4CVE-2024-11263EPSS 0.2%

    When the Global Pointer (GP) relative addressing is enabled (CONFIG_RISCV_GP=y), the gp reg points at 0x800 bytes past the start of the .sdata section which is then used by the linker to relax accesses to global symbols.

  14. 8.8CVE-2024-36513EPSS 0.2%

    A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4 and below, version 7.0.12 and below, 6.4 all versions may allow an authenticated user to escalate their privileges via lua auto patch scripts.

  15. 5.4CVE-2024-51987EPSS 0.2%

    Duende.AccessTokenManagement.OpenIdConnect is a set of .NET libraries that manage OAuth and OpenId Connect access tokens. HTTP Clients created by `AddUserAccessTokenHttpClient` may use a different user's access token after a token refresh …

  16. 5.5CVE-2024-47173EPSS 0.4%

    Aimeos is an e-commerce framework. All SaaS and marketplace setups using the Aimeos GraphQL API admin interface version from 2024.04 up to 2024.07.1 are affected by a potential denial of service attack. Version 2024.07.2 fixes the issue.

  17. 8.8CVE-2024-8641EPSS 0.6%

    An issue has been discovered in GitLab CE/EE affecting all versions starting from 13.7 prior to 17.1.7, from 17.2 prior to 17.2.5, and from 17.3 prior to 17.3.2. It may have been possible for an attacker with a victim's CI_JOB_TOKEN to obt…

  18. 5.5CVE-2024-37294EPSS 0.4%

    Aimeos is an Open Source e-commerce framework for online shops. All SaaS and marketplace setups using Aimeos version from 2022/2023/2024 are affected by a potential denial of service attack. Users should upgrade to versions 2022.10.17, 202…

  19. 8.8CVE-2023-37912EPSS 1.5%

    XWiki Rendering is a generic Rendering system that converts textual input in a given syntax into another syntax. Prior to version 14.10.6 of `org.xwiki.platform:xwiki-core-rendering-macro-footnotes` and `org.xwiki.platform:xwiki-rendering-…

  20. 9.8CVE-2023-25754EPSS 2.3%

    Privilege Context Switching Error vulnerability in Apache Software Foundation Apache Airflow.This issue affects Apache Airflow: before 2.6.0.

  21. 8.8CVE-2023-26475EPSS 64%

    XWiki Platform is a generic wiki platform. Starting in version 2.3-milestone-1, the annotation displayer does not execute the content in a restricted context. This allows executing anything with the right of the author of any document by a…

  22. 5.4CVE-2020-1719EPSS 0.6%

    A flaw was found in wildfly. The EJBContext principle is not popped back after invoking another EJB using a different Security Domain. The highest threat from this vulnerability is to data confidentiality and integrity. Versions before wil…

  23. 7.8CVE-2021-3493KEVExploitEPSS 49%

    The overlayfs implementation in the linux kernel did not properly validate with respect to user namespaces the setting of file capabilities on files in an underlying file system. Due to the combination of unprivileged user namespaces along…

  24. 3.1CVE-2020-7020EPSS 1.1%

    Elasticsearch versions before 6.8.13 and 7.9.2 contain a document disclosure flaw when Document or Field Level Security is used. Search queries do not properly preserve security permissions when executing certain complex queries. This coul…

  25. 6.5CVE-2020-7019EPSS 1.4%

    In Elasticsearch before 7.9.0 and 6.8.12 a field disclosure flaw was found when running a scrolling search with Field Level Security. If a user runs the same query another more privileged user recently ran, the scrolling search can leak fi…

  26. 8.8CVE-2019-14819EPSS 1.1%

    A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster. Using CRI-O, the dockergc service account is assigned to the current namespace of the user performing the upgrade. This flaw can allow an unprivil…

  27. 7.8CVE-2017-2663EPSS 0.4%

    It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user access the com.redhat.RHSM1.Facts.GetFacts and com.redhat.RHSM1.Config.Set methods. An unprivileged local attacker could use these methods to gain …