Improper Check for Dropped Privileges

ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can res

• pre-auth RCE

ktsuss project · ktsussNov 19, 2019

AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl co

• Pre-auth

alienvault · ossimMar 22, 2017

libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified ve

• Pre-auth

fedoraproject · fedoraMay 18, 2015

Original block tokens are persisted and can be retrieved

• Pre-auth

apache · ozoneNov 19, 2021

SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec.

• Pre-auth

snmptt · snmpttAug 16, 2020

masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping.

• Pre-auth

marmaro · masqmailNov 19, 2019

Bitlbee does not drop extra group privileges correctly in unix.c

• Pre-auth

bitlbee · bitlbeeOct 29, 2019

Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.

• Pre-auth

play with docker project · play with dockerJun 29, 2023

Multiple jail filesystem root escapes

• Pre-auth

freebsd · freebsd3 days ago

Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events.

• Pre-auth

mozilla · firefoxSep 3, 2024

Multiple jail filesystem root escapes

freebsd · freebsd3 days ago

The docker packages version docker-1.13.1-108.git4ef4b30.el7 as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 (https://a

• RCE

docker · dockerJul 13, 2020

The version of docker as released for Red Hat Enterprise Linux 7 Extras via RHBA-2020:0053 advisory included an incorrect version of runc mi

docker · dockerJul 13, 2020

xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails

• RCE
• Local privilege escalation

neutrinolabs · xrdpApr 17, 2026

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).

siemens · scalance lpe9403 firmwareMar 11, 2025

PraisonAI before 4.6.78 Unenforced Security Policy in Subprocess Sandbox

• pre-auth RCE

mervinpraison · praisonaiJul 15, 2026

HP Anyware Agent for Linux – Potential Authentication Bypass

• Auth bypass
• Local privilege escalation

hp, inc. · hp anyware linux agentFeb 3, 2025

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.

• RCE
• Local privilege escalation

gnu · bashNov 28, 2019

ktrace(2) privilege incorrectly validated in jails

freebsd · freebsdAug 19, 2026

An elevation of privilege vulnerability exists when the Diagnostics Hub Standard Collector Service improperly impersonates certain file oper

• Local privilege escalation

microsoft · visual studioDec 11, 2018

In Zsh before 5.8, attackers able to execute commands can regain privileges dropped by the --no-PRIVILEGED option.

• Local privilege escalation

zsh · zshFeb 24, 2020

netfilter: nft_ct: skip expectations for confirmed conntrack

linux · linux kernelMar 15, 2024

artswrapper in aRts, when running setuid root on Linux 2.6.0 or later versions, does not check the return value of the setuid function call,

• Local privilege escalation

linux · linux kernelJun 15, 2006

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation.

• Local privilege escalation

qemu · qemuAug 29, 2022

netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

linux · linux kernelFeb 20, 2024