CWE-268 · 22 records

Privilege Chaining

CVEs in this class

22 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2026-3888Weaponized	Local Privilege Escalation in snapdcanonical · ubuntu linux · CWE-268 Local privilege escalation	High7.8	—	0.4%	Mar 17, 2026
35Monitor	CVE-2024-4877No exploit	OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI copenvpn · openvpn · CWE-268	High8.8	—	0.4%	Apr 3, 2025
35Monitor	CVE-2023-0759No exploit	Privilege Chaining in cockpit-hq/cockpitagentejo · cockpit · CWE-268	High8.8	—	0.3%	Feb 9, 2023
35Monitor	CVE-2023-0971No exploit	Command Authentication Bypass in Z/IP Gatewaysilabs · z\/ip gateway sdk · CWE-268 Pre-auth Auth bypass	High8.8	—	0.2%	Jun 21, 2023
34Monitor	CVE-2026-32325No exploit	Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.fsas technologies inc. · serverview agents for windows · CWE-268 Local privilege escalation	High8.5	—	0.1%	Jun 1, 2026
34Monitor	CVE-2025-7973No exploit	Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerabilityrockwell automation · factorytalk® viewpoint · CWE-268 Local privilege escalation	High8.5	—	0.1%	Aug 14, 2025
34Monitor	CVE-2025-64701No exploit	QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to aqualitysoft corporation · qnd premium/advance/standard · CWE-268 Local privilege escalation	High8.5	—	0.1%	Dec 11, 2025
32Monitor	CVE-2024-1299No exploit	Privilege Chaining in GitLabgitlab · gitlab · CWE-268	High8.1	—	0.6%	Mar 6, 2024
31Monitor	CVE-2025-49741Proof of concept	Microsoft Edge (Chromium-based) Information Disclosure Vulnerabilitymicrosoft · edge chromium · CWE-268 Pre-auth	High7.5	—	3.9%	Jul 1, 2025
31Monitor	CVE-2019-3844Proof of concept	It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, whichsystemd project · systemd · CWE-268 Local privilege escalation	High7.8	—	0.9%	Apr 26, 2019
31Monitor	CVE-2023-5839No exploit	Privilege Chaining in hestiacp/hestiacphestiacp · control panel · CWE-268 Local privilege escalation	High7.8	—	0.2%	Oct 28, 2023
31Monitor	CVE-2024-47045No exploit	Privilege chaining issue exists in the installer of e-Tax software(common program).national tax agency · the installer of e-tax software(common program) · CWE-268 Local privilege escalation	High7.8	—	0.1%	Sep 26, 2024
30Monitor	CVE-2025-36124No exploit	IBM WebSphere Application Server Liberty bypass securityibm · websphere application server · CWE-268 Pre-auth Denial of service	High7.5	—	0.3%	Aug 12, 2025
28Monitor	CVE-2025-0889No exploit	Privilege Management for Windows – Elevation of Privilegebeyondtrust · privilege management for windows · CWE-268 Local privilege escalation	High7.2	—	0.2%	Feb 26, 2025
28Monitor	CVE-2025-2297No exploit	Privilege Management for Windows - Elevation of Privilegebeyondtrust · privilege management for windows · CWE-268 Local privilege escalation	High7.2	—	0.1%	Jul 28, 2025
26Monitor	CVE-2024-1250No exploit	Privilege Chaining in GitLabgitlab · gitlab · CWE-268	Medium6.5	—	0.5%	Feb 12, 2024
26Monitor	CVE-2023-2250No exploit	A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registrationlinuxfoundation · open cluster management · CWE-268 Local privilege escalation	Medium6.7	—	0.2%	Apr 24, 2023
26Monitor	GHSA-xpff-c35g-j3crNo exploit	silverstripe/framework Privilege Escalation Risk in Member Edit formPackagist · silverstripe/framework · CWE-268	Medium6.5	—	—	May 27, 2024
24Monitor	CVE-2025-32955No exploit	Harden-Runner Evasion of 'disable-sudo' policystep-security · harden-runner · CWE-268 Local privilege escalation	Medium6.0	—	0.2%	Apr 21, 2025
20Monitor	CVE-2025-20112No exploit	Cisco Unified Communications Products Privilege Escalation Vulnerabilitycisco · cisco emergency responder · CWE-268 Local privilege escalation	Medium5.1	—	0.1%	May 21, 2025
19Monitor	CVE-2023-20194No exploit	A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operatincisco · identity services engine · CWE-268	Medium4.9	—	0.7%	Sep 7, 2023
19Monitor	CVE-2022-1003No exploit	Sysadmin can override existing configs & bypass restrictions like EnableUploadsmattermost · mattermost · CWE-268	Medium4.9	—	0.5%	Mar 18, 2022

CVE-2026-3888
40Plan
Local Privilege Escalation in snapd
HighCVSS 7.8WeaponizedEPSS 0%
- Local privilege escalation
canonical · ubuntu linuxMar 17, 2026
CVE-2024-4877
35Monitor
OpenVPN version 2.4.0 through 2.6.10 on Windows allows an external, lesser privileged process to create a named pipe which the OpenVPN GUI c
HighCVSS 8.8No exploitEPSS 0%
openvpn · openvpnApr 3, 2025
CVE-2023-0759
35Monitor
Privilege Chaining in cockpit-hq/cockpit
HighCVSS 8.8No exploitEPSS 0%
agentejo · cockpitFeb 9, 2023
CVE-2023-0971
35Monitor
Command Authentication Bypass in Z/IP Gateway
HighCVSS 8.8No exploitEPSS 0%
- Pre-auth
- Auth bypass
silabs · z\/ip gateway sdkJun 21, 2023
CVE-2026-32325
34Monitor
Privilege chaining issue exists in ServerView Agents for Windows V11.60.04 and earlier.
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
fsas technologies inc. · serverview agents for windowsJun 1, 2026
CVE-2025-7973
34Monitor
Rockwell Automation FactoryTalk® ViewPoint Privilege Escalation Vulnerability
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
rockwell automation · factorytalk® viewpointAug 14, 2025
CVE-2025-64701
34Monitor
QND Premium/Advance/Standard Ver.11.0.9i and prior contains a privilege escalation vulnerability, which may allow a user who can log in to a
HighCVSS 8.5No exploitEPSS 0%
- Local privilege escalation
qualitysoft corporation · qnd premium/advance/standardDec 11, 2025
CVE-2024-1299
32Monitor
Privilege Chaining in GitLab
HighCVSS 8.1No exploitEPSS 0%
gitlab · gitlabMar 6, 2024
CVE-2025-49741
31Monitor
Microsoft Edge (Chromium-based) Information Disclosure Vulnerability
HighCVSS 7.5Proof of conceptEPSS 3%
- Pre-auth
microsoft · edge chromiumJul 1, 2025
CVE-2019-3844
31Monitor
It was discovered that a systemd service that uses DynamicUser property can get new privileges through the execution of SUID binaries, which
HighCVSS 7.8Proof of conceptEPSS 0%
- Local privilege escalation
systemd project · systemdApr 26, 2019
CVE-2023-5839
31Monitor
Privilege Chaining in hestiacp/hestiacp
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
hestiacp · control panelOct 28, 2023
CVE-2024-47045
31Monitor
Privilege chaining issue exists in the installer of e-Tax software(common program).
HighCVSS 7.8No exploitEPSS 0%
- Local privilege escalation
national tax agency · the installer of e-tax software(common program)Sep 26, 2024
CVE-2025-36124
30Monitor
IBM WebSphere Application Server Liberty bypass security
HighCVSS 7.5No exploitEPSS 0%
- Pre-auth
- Denial of service
ibm · websphere application serverAug 12, 2025
CVE-2025-0889
28Monitor
Privilege Management for Windows – Elevation of Privilege
HighCVSS 7.2No exploitEPSS 0%
- Local privilege escalation
beyondtrust · privilege management for windowsFeb 26, 2025
CVE-2025-2297
28Monitor
Privilege Management for Windows - Elevation of Privilege
HighCVSS 7.2No exploitEPSS 0%
- Local privilege escalation
beyondtrust · privilege management for windowsJul 28, 2025
CVE-2024-1250
26Monitor
Privilege Chaining in GitLab
MediumCVSS 6.5No exploitEPSS 0%
gitlab · gitlabFeb 12, 2024
CVE-2023-2250
26Monitor
A flaw was found in the Open Cluster Management (OCM) when a user have access to the worker nodes which has the cluster-manager-registration
MediumCVSS 6.7No exploitEPSS 0%
- Local privilege escalation
linuxfoundation · open cluster managementApr 24, 2023
GHSA-xpff-c35g-j3cr
26Monitor
silverstripe/framework Privilege Escalation Risk in Member Edit form
MediumCVSS 6.5No exploit
Packagist · silverstripe/frameworkMay 27, 2024
CVE-2025-32955
24Monitor
Harden-Runner Evasion of 'disable-sudo' policy
MediumCVSS 6.0No exploitEPSS 0%
- Local privilege escalation
step-security · harden-runnerApr 21, 2025
CVE-2025-20112
20Monitor
Cisco Unified Communications Products Privilege Escalation Vulnerability
MediumCVSS 5.1No exploitEPSS 0%
- Local privilege escalation
cisco · cisco emergency responderMay 21, 2025
CVE-2023-20194
19Monitor
A vulnerability in the ERS API of Cisco ISE could allow an authenticated, remote attacker to read arbitrary files on the underlying operatin
MediumCVSS 4.9No exploitEPSS 0%
cisco · identity services engineSep 7, 2023
CVE-2022-1003
19Monitor
Sysadmin can override existing configs & bypass restrictions like EnableUploads
MediumCVSS 4.9No exploitEPSS 0%
mattermost · mattermostMar 18, 2022

All vulnerability classes