CWE-250 · 349 kayıt
Execution with Unnecessary Privileges
Bu sınıftaki CVE’ler
349 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
74Bu hafta | CVE-2024-38813Silahlaştırılmış | Privilege escalation vulnerabilityvmware · cloud foundation · CWE-250 | Kritik9,8 | KEV | %17,4 | 17 Eyl 2024 |
58Planlayın | CVE-2024-1222İstismar yok | Incorrect authorization controls in PaperCut NG/MF APIspapercut · papercut mf · CWE-250 | Kritik9,8 | — | %64,0 | 13 Mar 2024 |
57Planlayın | CVE-2025-40602Silahlaştırılmış | A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).sonicwall · sma6200 firmware · CWE-250 | Orta6,6 | KEV | %2,8 | 18 Ara 2025 |
53Planlayın | CVE-2025-12420Kavram kanıtı | Unauthenticated Privilege Escalation in ServiceNow AI Platformservicenow · now assist ai agents · CWE-250 | Kritik9,3 | — | %53,2 | 12 Oca 2026 |
40Planlayın | CVE-2021-41035İstismar yok | In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface metheclipse · openj9 · CWE-250 | Kritik9,8 | — | %1,8 | 25 Eki 2021 |
40Planlayın | CVE-2022-1517İstismar yok | 3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250illumina · local run manager · CWE-250 | Kritik9,8 | — | %1,8 | 24 Haz 2022 |
40Planlayın | CVE-2026-4606İstismar yok | GeoVision ERM Improper Privilege Assignment Leads to SYSTEM-Level Privilegegeovision · gv-edge recording manager · CWE-250 | Kritik10,0 | — | %0,4 | 22 Mar 2026 |
39İzleyin | CVE-2025-34515İstismar yok | Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalationilevia · eve x1 server firmware · CWE-250 | Kritik9,3 | — | %8,0 | 16 Eki 2025 |
39İzleyin | CVE-2024-25421İstismar yok | An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.igniterealtime · openfire · CWE-250 | Kritik9,8 | — | %1,7 | 26 Mar 2024 |
39İzleyin | CVE-2023-52030İstismar yok | TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg functiototolink · a3700r firmware · CWE-250 | Kritik9,8 | — | %1,5 | 11 Oca 2024 |
39İzleyin | CVE-2023-4662İstismar yok | RCE in Saphira Connectadobe · connect · CWE-250 | Kritik9,8 | — | %1,2 | 15 Eyl 2023 |
39İzleyin | CVE-2024-27143İstismar yok | Pre-authenticated Remote Code Executiontoshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp) · CWE-250 | Kritik9,8 | — | %1,1 | 13 Haz 2024 |
39İzleyin | CVE-2022-2634İstismar yok | Digi ConnectPort X2Ddigi · connectport x2d firmware · CWE-250 | Kritik9,8 | — | %1,0 | 10 Ağu 2022 |
39İzleyin | CVE-2023-1966İstismar yok | Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability.illumina · iscan firmware · CWE-250 | Kritik9,8 | — | %0,9 | 28 Nis 2023 |
39İzleyin | CVE-2022-44544İstismar yok | Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger mahara · mahara · CWE-250 | Kritik9,8 | — | %0,8 | 6 Kas 2022 |
39İzleyin | CVE-2026-72508İstismar yok | Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)red hat · red hat advanced cluster management for kubernetes 2.11 · CWE-250 | Kritik9,9 | — | %0,8 | 12 Ağu 2026 |
39İzleyin | CVE-2025-33224İstismar yok | NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.nvidia · isaac launchable · CWE-250 | Kritik9,8 | — | %0,8 | 23 Ara 2025 |
39İzleyin | CVE-2025-32445İstismar yok | Users can gain privileged access to the host system and cluster with EventSource and Sensor CRargoproj · argo-events · CWE-250 | Kritik9,9 | — | %0,8 | 15 Nis 2025 |
39İzleyin | CVE-2022-32535İstismar yok | Web server runs as rootbosch · pra-es8p2s firmware · CWE-250 | Kritik9,8 | — | %0,8 | 23 Haz 2022 |
39İzleyin | CVE-2026-34877İstismar yok | An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.arm · mbed tls · CWE-250 | Kritik9,8 | — | %0,7 | 2 Nis 2026 |
39İzleyin | CVE-2023-45592İstismar yok | A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the ailux · imx6 · CWE-250 | Kritik9,8 | — | %0,7 | 5 Mar 2024 |
39İzleyin | CVE-2025-33223İstismar yok | NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.nvidia · isaac launchable · CWE-250 | Kritik9,8 | — | %0,7 | 23 Ara 2025 |
39İzleyin | CVE-2024-3330İstismar yok | Spotfire Remote Code Execution Vulnerabilityspotfire · spotfire analyst · CWE-250 | Kritik9,9 | — | %0,6 | 27 Haz 2024 |
39İzleyin | CVE-2025-57119İstismar yok | An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login phpgurukul · online library management system · CWE-250 | Kritik9,8 | — | %0,6 | 16 Eyl 2025 |
39İzleyin | CVE-2026-70496İstismar yok | Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestworkred hat · red hat advanced cluster management for kubernetes 2.11 · CWE-250 | Kritik9,9 | — | %0,6 | 19 Ağu 2026 |
- CVE-2024-3881374Bu hafta
Privilege escalation vulnerability
KritikCVSS 9,8KEVSilahlaştırılmışEPSS %17vmware · cloud foundation17 Eyl 2024
- CVE-2024-122258Planlayın
Incorrect authorization controls in PaperCut NG/MF APIs
KritikCVSS 9,8İstismar yokEPSS %64papercut · papercut mf13 Mar 2024
- CVE-2025-4060257Planlayın
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
OrtaCVSS 6,6KEVSilahlaştırılmışEPSS %3sonicwall · sma6200 firmware18 Ara 2025
- CVE-2025-1242053Planlayın
Unauthenticated Privilege Escalation in ServiceNow AI Platform
KritikCVSS 9,3Kavram kanıtıEPSS %53servicenow · now assist ai agents12 Oca 2026
- CVE-2021-4103540Planlayın
In Eclipse Openj9 before version 0.29.0, the JVM does not throw IllegalAccessError for MethodHandles that invoke inaccessible interface meth
KritikCVSS 9,8İstismar yokEPSS %2eclipse · openj925 Eki 2021
- CVE-2022-151740Planlayın
3.2.1 EXECUTION WITH UNNECESSARY PRIVILEGES CWE-250
KritikCVSS 9,8İstismar yokEPSS %2illumina · local run manager24 Haz 2022
- CVE-2026-460640Planlayın
GeoVision ERM Improper Privilege Assignment Leads to SYSTEM-Level Privilege
KritikCVSS 10,0İstismar yokEPSS %0geovision · gv-edge recording manager22 Mar 2026
- CVE-2025-3451539İzleyin
Ilevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation
KritikCVSS 9,3İstismar yokEPSS %8ilevia · eve x1 server firmware16 Eki 2025
- CVE-2024-2542139İzleyin
An issue in Ignite Realtime Openfire v.4.9.0 and before allows a remote attacker to escalate privileges via the ROOM_CACHE component.
KritikCVSS 9,8İstismar yokEPSS %2igniterealtime · openfire26 Mar 2024
- CVE-2023-5203039İzleyin
TOTOlink A3700R v9.1.2u.5822_B20200513 was discovered to contain a remote command execution (RCE) vulnerability via the setOpModeCfg functio
KritikCVSS 9,8İstismar yokEPSS %2totolink · a3700r firmware11 Oca 2024
- CVE-2023-466239İzleyin
RCE in Saphira Connect
KritikCVSS 9,8İstismar yokEPSS %1adobe · connect15 Eyl 2023
- CVE-2024-2714339İzleyin
Pre-authenticated Remote Code Execution
KritikCVSS 9,8İstismar yokEPSS %1toshiba tec corporation · toshiba tec e-studio multi-function peripheral (mfp)13 Haz 2024
- CVE-2022-263439İzleyin
Digi ConnectPort X2D
KritikCVSS 9,8İstismar yokEPSS %1digi · connectport x2d firmware10 Ağu 2022
- CVE-2023-196639İzleyin
Instruments with Illumina Universal Copy Service v1.x and v2.x contain an unnecessary privileges vulnerability.
KritikCVSS 9,8İstismar yokEPSS %1illumina · iscan firmware28 Nis 2023
- CVE-2022-4454439İzleyin
Mahara 21.04 before 21.04.7, 21.10 before 21.10.5, 22.04 before 22.04.3, and 22.10 before 22.10.0 potentially allow a PDF export to trigger
KritikCVSS 9,8İstismar yokEPSS %1mahara · mahara6 Kas 2022
- CVE-2026-7250839İzleyin
Multicloud-operators-subscription: multicloud-operators-subscription: hub and spoke serviceaccounts bound to wildcard rbac (*/*/*)
KritikCVSS 9,9İstismar yokEPSS %1red hat · red hat advanced cluster management for kubernetes 2.1112 Ağu 2026
- CVE-2025-3322439İzleyin
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.
KritikCVSS 9,8İstismar yokEPSS %1nvidia · isaac launchable23 Ara 2025
- CVE-2025-3244539İzleyin
Users can gain privileged access to the host system and cluster with EventSource and Sensor CR
KritikCVSS 9,9İstismar yokEPSS %1argoproj · argo-events15 Nis 2025
- CVE-2022-3253539İzleyin
Web server runs as root
KritikCVSS 9,8İstismar yokEPSS %1bosch · pra-es8p2s firmware23 Haz 2022
- CVE-2026-3487739İzleyin
An issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0.
KritikCVSS 9,8İstismar yokEPSS %1arm · mbed tls2 Nis 2026
- CVE-2023-4559239İzleyin
A CWE-250 “Execution with Unnecessary Privileges” vulnerability in the embedded Chromium browser (due to the binary being executed with the
KritikCVSS 9,8İstismar yokEPSS %1ailux · imx65 Mar 2024
- CVE-2025-3322339İzleyin
NVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with unnecessary privileges.
KritikCVSS 9,8İstismar yokEPSS %1nvidia · isaac launchable23 Ara 2025
- CVE-2024-333039İzleyin
Spotfire Remote Code Execution Vulnerability
KritikCVSS 9,9İstismar yokEPSS %1spotfire · spotfire analyst27 Haz 2024
- CVE-2025-5711939İzleyin
An issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via the adminlogin.php component and the Login
KritikCVSS 9,8İstismar yokEPSS %1phpgurukul · online library management system16 Eyl 2025
- CVE-2026-7049639İzleyin
Search-v2-operator: search-v2-operator: operator clusterrole is cluster-admin equivalent via impersonate, rbac write, csr approve, and manifestwork
KritikCVSS 9,9İstismar yokEPSS %1red hat · red hat advanced cluster management for kubernetes 2.1119 Ağu 2026