Skip to content
Noroxi

CWE-250 · 361 records

Execution with Unnecessary Privileges

CVEs in this class

361 records

  • CVE-2024-38813
    74This week

    Privilege escalation vulnerability

    CriticalCVSS 9.8KEVWeaponizedEPSS 17%

    vmware · cloud foundationSep 17, 2024

  • CVE-2024-1222
    58Plan

    Incorrect authorization controls in PaperCut NG/MF APIs

    CriticalCVSS 9.8No exploitEPSS 63%

    papercut · papercut mfMar 13, 2024

  • CVE-2025-40602
    57Plan

    A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).

    MediumCVSS 6.6KEVWeaponizedEPSS 2%

    sonicwall · sma6200 firmwareDec 18, 2025

  • CVE-2025-12420
    53Plan

    Unauthenticated Privilege Escalation in ServiceNow AI Platform

    CriticalCVSS 9.3Proof of conceptEPSS 53%

    servicenow · now assist ai agentsJan 12, 2026

  • CVE-2021-41035
    40Plan

    In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface meth

    CriticalCVSS 9.8No exploitEPSS 1%

    eclipse · openj9Oct 25, 2021

  • CVE-2022-1517
    40Plan

    3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250

    CriticalCVSS 9.8No exploitEPSS 1%

    illumina · local run managerJun 24, 2022

  • CVE-2026-65162
    40Plan

    NVIDIA AIStore for Linux contains a vulnerability in the legacy ETL Kubernetes PodSpec initialization API where a remote attacker may supply

    CriticalCVSS 10.0No exploitEPSS 0%

    nvidia · aistore frameworkOct 13, 2026

  • CVE-2026-4606
    40Plan

    GeoVision ERM Improper Privilege Assignment Leads to SYSTEM-Level Privilege

    CriticalCVSS 10.0No exploitEPSS 0%

    geovision · gv-edge recording managerMar 22, 2026

  • CVE-2025-34515
    39Monitor

    Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation

    CriticalCVSS 9.3No exploitEPSS 7%

    ilevia · eve x1 server firmwareOct 16, 2025

  • CVE-2024-25421
    39Monitor

    An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.

    CriticalCVSS 9.8No exploitEPSS 1%

    igniterealtime · openfireMar 26, 2024

  • CVE-2023-52030
    39Monitor

    TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg functio

    CriticalCVSS 9.8No exploitEPSS 1%

    totolink · a3700r firmwareJan 11, 2024

  • CVE-2023-4662
    39Monitor

    RCE in Saphira Connect

    CriticalCVSS 9.8No exploitEPSS 1%

    adobe · connectSep 15, 2023

  • CVE-2024-27143
    39Monitor

    Pre-authenticated Remote Code Execution

    CriticalCVSS 9.8No exploitEPSS 1%

    toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)Jun 13, 2024

  • CVE-2022-2634
    39Monitor

    Digi ConnectPort X2D

    CriticalCVSS 9.8No exploitEPSS 1%

    digi · connectport x2d firmwareAug 10, 2022

  • CVE-2023-1966
    39Monitor

    Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability.

    CriticalCVSS 9.8No exploitEPSS 0%

    illumina · iscan firmwareApr 28, 2023

  • CVE-2022-44544
    39Monitor

    Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger

    CriticalCVSS 9.8No exploitEPSS 0%

    mahara · maharaNov 6, 2022

  • CVE-2026-72508
    39Monitor

    Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)

    CriticalCVSS 9.9No exploitEPSS 0%

    red hat · red hat advanced cluster management for kubernetes 2.11Aug 12, 2026

  • CVE-2025-33224
    39Monitor

    NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.

    CriticalCVSS 9.8No exploitEPSS 0%

    nvidia · isaac launchableDec 23, 2025

  • CVE-2022-32535
    39Monitor

    Web server runs as root

    CriticalCVSS 9.8No exploitEPSS 0%

    bosch · pra-es8p2s firmwareJun 23, 2022

  • CVE-2025-32445
    39Monitor

    Users can gain privileged access to the host system and cluster with EventSource and Sensor CR

    CriticalCVSS 9.9No exploitEPSS 0%

    argoproj · argo-eventsApr 15, 2025

  • CVE-2026-34877
    39Monitor

    An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.

    CriticalCVSS 9.8No exploitEPSS 0%

    arm · mbed tlsApr 2, 2026

  • CVE-2023-45592
    39Monitor

    A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the

    CriticalCVSS 9.8No exploitEPSS 0%

    ailux · imx6Mar 5, 2024

  • CVE-2025-33223
    39Monitor

    NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.

    CriticalCVSS 9.8No exploitEPSS 0%

    nvidia · isaac launchableDec 23, 2025

  • CVE-2024-3330
    39Monitor

    Spotfire Remote Code Execution Vulnerability

    CriticalCVSS 9.9No exploitEPSS 0%

    spotfire · spotfire analystJun 27, 2024

  • CVE-2025-13375
    39Monitor

    IBM Common Cryptographic Architecture Arbitrary Command Execution

    CriticalCVSS 9.8No exploitEPSS 0%

    ibm · common cryptographic architectureFeb 4, 2026

All vulnerability classes