CWE-272 · 27 records
Least Privilege Violation
CVEs in this class
27 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
35Monitor | CVE-2025-59106No exploit | Web Server Running with Root Privileges in dormakaba access managerdormakabagroup · dormakaba access manager 9200-k7 firmware · CWE-272 | High8.8 | — | 0.7% | Jan 26, 2026 |
35Monitor | CVE-2025-7722No exploit | Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalationsteverio · social streams · CWE-272 | High8.8 | — | 0.4% | Jul 22, 2025 |
34Monitor | CVE-2026-39459No exploit | iControl REST and tmsh vulnerabilityf5 · big-ip access policy manager · CWE-272 | High8.6 | — | 0.4% | May 13, 2026 |
34Monitor | CVE-2025-9711No exploit | Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2bbroadcom · fabric operating system · CWE-272 | High8.5 | — | 0.1% | Feb 3, 2026 |
33Monitor | CVE-2024-35204No exploit | Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus low-privileged users cCWE-272 | High8.4 | — | 0.2% | May 14, 2024 |
32Monitor | CVE-2026-103504No exploit | Gitea API team demotion not applied to unit permissionsgitea · gitea · CWE-272 | High8.1 | — | 0.2% | Oct 6, 2026 |
32Monitor | CVE-2025-47809No exploit | Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot).wibu · codemeter · CWE-272 | High8.2 | — | 0.1% | May 15, 2025 |
31Monitor | CVE-2024-27165No exploit | Local Privilege Escalationtoshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp) · CWE-272 | High7.8 | — | 0.2% | Jun 14, 2024 |
31Monitor | CVE-2024-28824No exploit | Privilege escalation in mk_informix plugincheckmk · checkmk · CWE-272 | High7.8 | — | 0.1% | Mar 22, 2024 |
31Monitor | CVE-2023-28047No exploit | Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation.dell · display manager · CWE-272 | High7.8 | — | 0.1% | Apr 20, 2023 |
31Monitor | CVE-2023-32451No exploit | Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during instdell · display manager · CWE-272 | High7.8 | — | 0.1% | Feb 6, 2024 |
31Monitor | CVE-2026-32655No exploit | Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability.dell · alienware command center · CWE-272 | High7.8 | — | 0.1% | Apr 27, 2026 |
29Monitor | CVE-2025-49144Proof of concept | Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Pathnotepad-plus-plus · notepad-plus-plus · CWE-272 | High7.3 | — | 0.6% | Jun 23, 2025 |
29Monitor | CVE-2026-59915No exploit | Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability.dell · alienware command center (awcc) · CWE-272 | High7.3 | — | 0.1% | Aug 18, 2026 |
28Monitor | CVE-2025-1384No exploit | Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllersomron corporation · machine automation controller nj-series · CWE-272 | High7.0 | — | 0.2% | Jul 13, 2025 |
28Monitor | CVE-2023-28046No exploit | Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local ldell · display manager · CWE-272 | High7.1 | — | 0.1% | Apr 6, 2023 |
28Monitor | CVE-2026-81452No exploit | Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability.dell · alienware command center (awcc) · CWE-272 | High7.0 | — | 0.1% | 4 days ago |
26Monitor | CVE-2024-0798No exploit | Privilege Escalation in mintplex-labs/anything-llmmintplexlabs · anythingllm · CWE-272 | Medium6.5 | — | 0.5% | Feb 26, 2024 |
26Monitor | CVE-2025-62299No exploit | HCL IntelliOps Event Management is affected by multiple security vulnerabilities.hcl software · iem · CWE-272 | Medium6.6 | — | 0.2% | Aug 20, 2026 |
26Monitor | CVE-2025-68267No exploit | In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installajetbrains · teamcity · CWE-272 | Medium6.5 | — | 0.2% | Dec 16, 2025 |
26Monitor | CVE-2024-0638No exploit | Privilege escalation in mk_oracle pluginscheckmk · checkmk · CWE-272 | Medium6.7 | — | 0.1% | Mar 22, 2024 |
24Monitor | CVE-2026-49500No exploit | Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following')dell · alienware command center (awcc · CWE-272 | Medium6.0 | — | 0.1% | Aug 18, 2026 |
20Monitor | CVE-2024-28829No exploit | Privilege escalation in mk_informix plugincheckmk · checkmk · CWE-272 | Medium5.2 | — | 0.1% | Aug 20, 2024 |
17Monitor | CVE-2026-23634No exploit | Pepr Overly Permissive RBAC ClusterRole in Admin Modedefenseunicorns · pepr · CWE-272 | Medium4.3 | — | 0.2% | Jan 16, 2026 |
13Monitor | CVE-2026-79693No exploit | Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Videll · secure connect gateway · CWE-272 | Low3.4 | — | 0.1% | Sep 9, 2026 |
- CVE-2025-5910635Monitor
Web Server Running with Root Privileges in dormakaba access manager
HighCVSS 8.8No exploitEPSS 0%dormakabagroup · dormakaba access manager 9200-k7 firmwareJan 26, 2026
- CVE-2025-772235Monitor
Social Streams <= 1.2.1 - Authenticated (Subscriber+) Privilege Escalation
HighCVSS 8.8No exploitEPSS 0%steverio · social streamsJul 22, 2025
- CVE-2026-3945934Monitor
iControl REST and tmsh vulnerability
HighCVSS 8.6No exploitEPSS 0%f5 · big-ip access policy managerMay 13, 2026
- CVE-2025-971134Monitor
Privilege escalation in Brocade Fabric OS before 9.2.1c3, and 9.2.2 though 9.2.2b
HighCVSS 8.5No exploitEPSS 0%broadcom · fabric operating systemFeb 3, 2026
- CVE-2024-3520433Monitor
Veritas System Recovery before 23.3_Hotfix has incorrect permissions for the Veritas System Recovery folder, and thus low-privileged users c
HighCVSS 8.4No exploitEPSS 0%May 14, 2024
- CVE-2026-10350432Monitor
Gitea API team demotion not applied to unit permissions
HighCVSS 8.1No exploitEPSS 0%gitea · giteaOct 6, 2026
- CVE-2025-4780932Monitor
Wibu CodeMeter before 8.30a sometimes allows privilege escalation immediately after installation (before a logoff or reboot).
HighCVSS 8.2No exploitEPSS 0%wibu · codemeterMay 15, 2025
- CVE-2024-2716531Monitor
Local Privilege Escalation
HighCVSS 7.8No exploitEPSS 0%toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)Jun 14, 2024
- CVE-2024-2882431Monitor
Privilege escalation in mk_informix plugin
HighCVSS 7.8No exploitEPSS 0%checkmk · checkmkMar 22, 2024
- CVE-2023-2804731Monitor
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder creation vulnerability during installation.
HighCVSS 7.8No exploitEPSS 0%dell · display managerApr 20, 2023
- CVE-2023-3245131Monitor
Dell Display Manager application, version 2.1.1.17, contains a vulnerability that low privilege user can execute malicious code during inst
HighCVSS 7.8No exploitEPSS 0%dell · display managerFeb 6, 2024
- CVE-2026-3265531Monitor
Dell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain a Least Privilege Violation vulnerability.
HighCVSS 7.8No exploitEPSS 0%dell · alienware command centerApr 27, 2026
- CVE-2025-4914429Monitor
Notepad++ Privilege Escalation in Installer via Uncontrolled Executable Search Path
HighCVSS 7.3Proof of conceptEPSS 0%notepad-plus-plus · notepad-plus-plusJun 23, 2025
- CVE-2026-5991529Monitor
Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain a Least Privilege Violation vulnerability.
HighCVSS 7.3No exploitEPSS 0%dell · alienware command center (awcc)Aug 18, 2026
- CVE-2025-138428Monitor
Least Privilege Violation Vulnerability in the communications functions of NJ/NX-series Machine Automation Controllers
HighCVSS 7.0No exploitEPSS 0%omron corporation · machine automation controller nj-seriesJul 13, 2025
- CVE-2023-2804628Monitor
Dell Display Manager, versions 2.1.0 and prior, contains an arbitrary file or folder deletion vulnerability during uninstallation A local l
HighCVSS 7.1No exploitEPSS 0%dell · display managerApr 6, 2023
- CVE-2026-8145228Monitor
Dell Alienware Command Center (AWCC), versions prior to 6.14.54.0, contain a Least Privilege Violation vulnerability.
HighCVSS 7.0No exploitEPSS 0%dell · alienware command center (awcc)4 days ago
- CVE-2024-079826Monitor
Privilege Escalation in mintplex-labs/anything-llm
MediumCVSS 6.5No exploitEPSS 0%mintplexlabs · anythingllmFeb 26, 2024
- CVE-2025-6229926Monitor
HCL IntelliOps Event Management is affected by multiple security vulnerabilities.
MediumCVSS 6.6No exploitEPSS 0%hcl software · iemAug 20, 2026
- CVE-2025-6826726Monitor
In JetBrains TeamCity before 2025.11.1 excessive privileges were possible due to storing GitHub personal access token instead of an installa
MediumCVSS 6.5No exploitEPSS 0%jetbrains · teamcityDec 16, 2025
- CVE-2024-063826Monitor
Privilege escalation in mk_oracle plugins
MediumCVSS 6.7No exploitEPSS 0%checkmk · checkmkMar 22, 2024
- CVE-2026-4950024Monitor
Dell Alienware Command Center (AWCC), versions prior to 6.14.20.0, contain an Improper Link Resolution Before File Access ('Link Following')
MediumCVSS 6.0No exploitEPSS 0%dell · alienware command center (awccAug 18, 2026
- CVE-2024-2882920Monitor
Privilege escalation in mk_informix plugin
MediumCVSS 5.2No exploitEPSS 0%checkmk · checkmkAug 20, 2024
- CVE-2026-2363417Monitor
Pepr Overly Permissive RBAC ClusterRole in Admin Mode
MediumCVSS 4.3No exploitEPSS 0%defenseunicorns · peprJan 16, 2026
- CVE-2026-7969313Monitor
Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00, contains a Least Privilege Vi
LowCVSS 3.4No exploitEPSS 0%dell · secure connect gatewaySep 9, 2026