CWE-1220 · 102 kayıt

Insufficient Granularity of Access Control

Bu sınıftaki CVE’ler

102 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
73Bu hafta	CVE-2025-31201Silahlaştırılmış	This issue was addressed by removing the vulnerable code.apple · macos · CWE-1220 Kimlik doğrulamasız	Kritik9,8	KEV	%13,9	16 Nis 2025
61Bu hafta	CVE-2026-33825Silahlaştırılmış	Microsoft Defender Elevation of Privilege Vulnerabilitymicrosoft · defender antimalware platform · CWE-1220 Yerel yetki yükseltme	Yüksek7,8	KEV	%0,3	14 Nis 2026
61Bu hafta	CVE-2026-56155Silahlaştırılmış	Active Directory Federation Services Elevation of Privilege Vulnerabilitymicrosoft · windows 10 1607 · CWE-1220 Yerel yetki yükseltme	Yüksek7,8	KEV	%0,3	14 Tem 2026
40Planlayın	CVE-2023-43040Kavram kanıtı	IBM Spectrum Fusion HCI improper access controlibm · storage fusion hci · CWE-1220 Kimlik doğrulamasız	Kritik9,8	—	%3,0	14 May 2024
39İzleyin	GHSA-47wq-cj9q-wpmpİstismar yok	Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keysnpm · @paperclipai/server · CWE-1220	Kritik9,9	—	—	16 Nis 2026
38İzleyin	CVE-2026-6356Kavram kanıtı	A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through parameteaugmentt · augmentt · CWE-1220	Kritik9,6	—	%0,3	22 Nis 2026
37İzleyin	CVE-2025-4404Kavram kanıtı	Freeipa: idm: privilege escalation from host to domain admin in freeipared hat · red hat enterprise linux 10 · CWE-1220	Kritik9,1	—	%1,9	17 Haz 2025
36İzleyin	CVE-2025-7493İstismar yok	Freeipa: idm: privilege escalation from host to domain admin in freeipared hat · red hat enterprise linux 10 · CWE-1220	Kritik9,1	—	%0,5	30 Eyl 2025
36İzleyin	CVE-2026-6388İstismar yok	Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validationred hat · red hat openshift gitops · CWE-1220	Kritik9,1	—	%0,4	15 Nis 2026
35İzleyin	CVE-2026-40365İstismar yok	Microsoft SharePoint Server Remote Code Execution Vulnerabilitymicrosoft · sharepoint server · CWE-1220 RCE Deserializasyon	Yüksek8,8	—	%1,0	12 May 2026
35İzleyin	CVE-2026-77480İstismar yok	SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-1220	Yüksek8,8	—	%0,7	8 Eyl 2026
35İzleyin	CVE-2026-66814İstismar yok	Microsoft SQL Server Elevation of Privilege Vulnerabilitymicrosoft · sql server 2017 · CWE-1220	Yüksek8,8	—	%0,7	8 Eyl 2026
35İzleyin	CVE-2022-2475İstismar yok	Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.haascnc · haas controller firmware · CWE-1220	Yüksek8,8	—	%0,6	28 Eki 2022
35İzleyin	CVE-2026-50502İstismar yok	Windows Event Logging Service Remote Code Execution Vulnerabilitymicrosoft · windows 10 1607 · CWE-1220 RCE	Yüksek8,8	—	%0,6	14 Tem 2026
35İzleyin	CVE-2025-29987İstismar yok	Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Acdell · powerprotect data domain · CWE-1220 RCE	Yüksek8,8	—	%0,5	3 Nis 2025
35İzleyin	CVE-2026-35436İstismar yok	Microsoft Office Click-To-Run Elevation of Privilege Vulnerabilitymicrosoft · 365 apps · CWE-1220 Yerel yetki yükseltme	Yüksek8,8	—	%0,2	12 May 2026
34İzleyin	CVE-2026-103509İstismar yok	Credential Disclosure in P4 Search Configuration APIperforce · p4 (helix core) · CWE-1220	Yüksek8,5	—	%0,2	1 gün önce
34İzleyin	CVE-2024-21962İstismar yok	Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in pamd · amd epyc™ 4005 series processors · CWE-1220 RCE Yerel yetki yükseltme	Yüksek8,6	—	%0,1	14 May 2026
33İzleyin	CVE-2023-33127İstismar yok	.NET and Visual Studio Elevation of Privilege Vulnerabilitymicrosoft · .net · CWE-1220 Kimlik doğrulamasız	Yüksek8,1	—	%1,8	11 Tem 2023
33İzleyin	CVE-2025-3648İstismar yok	Data Inference in Now Platform via Conditional ACLsservicenow · now platform · CWE-1220 Kimlik doğrulamasız	Yüksek8,2	—	%1,6	8 Tem 2025
33İzleyin	CVE-2026-78122Kavram kanıtı	docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystemstecnativa · docker-socket-proxy · CWE-1220 Kimlik doğrulamasız	Yüksek8,3	—	%0,3	22 Ağu 2026
32İzleyin	CVE-2024-43604İstismar yok	Outlook for Android Elevation of Privilege Vulnerabilitymicrosoft · outlook · CWE-1220	Yüksek8,0	—	%1,1	8 Eki 2024
32İzleyin	CVE-2024-5389İstismar yok	Insufficient Access Control in lunary-ai/lunarylunary · lunary · CWE-1220	Yüksek8,1	—	%0,4	9 Haz 2024
31İzleyin	CVE-2026-83499İstismar yok	Windows Server Update Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-1220 Yerel yetki yükseltme	Yüksek7,8	—	%0,3	3 gün önce
31İzleyin	CVE-2026-81969İstismar yok	Windows Server Update Service Elevation of Privilege Vulnerabilitymicrosoft · windows 10 version 1607 · CWE-1220 Yerel yetki yükseltme	Yüksek7,8	—	%0,3	3 gün önce

CVE-2025-31201
73Bu hafta
This issue was addressed by removing the vulnerable code.
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %13
- Kimlik doğrulamasız
apple · macos16 Nis 2025
CVE-2026-33825
61Bu hafta
Microsoft Defender Elevation of Privilege Vulnerability
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0
- Yerel yetki yükseltme
microsoft · defender antimalware platform14 Nis 2026
CVE-2026-56155
61Bu hafta
Active Directory Federation Services Elevation of Privilege Vulnerability
YüksekCVSS 7,8KEVSilahlaştırılmışEPSS %0
- Yerel yetki yükseltme
microsoft · windows 10 160714 Tem 2026
CVE-2023-43040
40Planlayın
IBM Spectrum Fusion HCI improper access control
KritikCVSS 9,8Kavram kanıtıEPSS %3
- Kimlik doğrulamasız
ibm · storage fusion hci14 May 2024
GHSA-47wq-cj9q-wpmp
39İzleyin
Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys
KritikCVSS 9,9İstismar yok
npm · @paperclipai/server16 Nis 2026
CVE-2026-6356
38İzleyin
A vulnerability in the web application allows standard users to escalate their privileges to those of a super administrator through paramete
KritikCVSS 9,6Kavram kanıtıEPSS %0
augmentt · augmentt22 Nis 2026
CVE-2025-4404
37İzleyin
Freeipa: idm: privilege escalation from host to domain admin in freeipa
KritikCVSS 9,1Kavram kanıtıEPSS %1
red hat · red hat enterprise linux 1017 Haz 2025
CVE-2025-7493
36İzleyin
Freeipa: idm: privilege escalation from host to domain admin in freeipa
KritikCVSS 9,1İstismar yokEPSS %0
red hat · red hat enterprise linux 1030 Eyl 2025
CVE-2026-6388
36İzleyin
Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation
KritikCVSS 9,1İstismar yokEPSS %0
red hat · red hat openshift gitops15 Nis 2026
CVE-2026-40365
35İzleyin
Microsoft SharePoint Server Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %1
- RCE
- Deserializasyon
microsoft · sharepoint server12 May 2026
CVE-2026-77480
35İzleyin
SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
microsoft · sql server 20178 Eyl 2026
CVE-2026-66814
35İzleyin
Microsoft SQL Server Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
microsoft · sql server 20178 Eyl 2026
CVE-2022-2475
35İzleyin
Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.
YüksekCVSS 8,8İstismar yokEPSS %0
haascnc · haas controller firmware28 Eki 2022
CVE-2026-50502
35İzleyin
Windows Event Logging Service Remote Code Execution Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
microsoft · windows 10 160714 Tem 2026
CVE-2025-29987
35İzleyin
Dell PowerProtect Data Domain with Data Domain Operating System (DD OS) versions prior to 8.3.0.15 contain an Insufficient Granularity of Ac
YüksekCVSS 8,8İstismar yokEPSS %0
- RCE
dell · powerprotect data domain3 Nis 2025
CVE-2026-35436
35İzleyin
Microsoft Office Click-To-Run Elevation of Privilege Vulnerability
YüksekCVSS 8,8İstismar yokEPSS %0
- Yerel yetki yükseltme
microsoft · 365 apps12 May 2026
CVE-2026-103509
34İzleyin
Credential Disclosure in P4 Search Configuration API
YüksekCVSS 8,5İstismar yokEPSS %0
perforce · p4 (helix core)1 gün önce
CVE-2024-21962
34İzleyin
Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in p
YüksekCVSS 8,6İstismar yokEPSS %0
- RCE
- Yerel yetki yükseltme
amd · amd epyc™ 4005 series processors14 May 2026
CVE-2023-33127
33İzleyin
.NET and Visual Studio Elevation of Privilege Vulnerability
YüksekCVSS 8,1İstismar yokEPSS %1
- Kimlik doğrulamasız
microsoft · .net11 Tem 2023
CVE-2025-3648
33İzleyin
Data Inference in Now Platform via Conditional ACLs
YüksekCVSS 8,2İstismar yokEPSS %1
- Kimlik doğrulamasız
servicenow · now platform8 Tem 2025
CVE-2026-78122
33İzleyin
docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems
YüksekCVSS 8,3Kavram kanıtıEPSS %0
- Kimlik doğrulamasız
tecnativa · docker-socket-proxy22 Ağu 2026
CVE-2024-43604
32İzleyin
Outlook for Android Elevation of Privilege Vulnerability
YüksekCVSS 8,0İstismar yokEPSS %1
microsoft · outlook8 Eki 2024
CVE-2024-5389
32İzleyin
Insufficient Access Control in lunary-ai/lunary
YüksekCVSS 8,1İstismar yokEPSS %0
lunary · lunary9 Haz 2024
CVE-2026-83499
31İzleyin
Windows Server Update Service Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
microsoft · windows 10 version 16073 gün önce
CVE-2026-81969
31İzleyin
Windows Server Update Service Elevation of Privilege Vulnerability
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
microsoft · windows 10 version 16073 gün önce

Tüm zafiyet sınıfları