CWE-271 · 11 kayıt

Privilege Dropping / Lowering Errors

Bu sınıftaki CVE’ler

11 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
35İzleyin	CVE-2023-22648İstismar yok	A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while theysuse · rancher · CWE-271	Yüksek8,8	—	%0,5	1 Haz 2023
33İzleyin	CVE-2024-0985İstismar yok	PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQLpostgresql · postgresql · CWE-271 RCE	Yüksek8,0	—	%1,8	8 Şub 2024
32İzleyin	CVE-2019-11243İstismar yok	In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials rkubernetes · kubernetes · CWE-271 Kimlik doğrulamasız	Yüksek8,1	—	%1,5	22 Nis 2019
32İzleyin	GHSA-55f6-4pr5-c7m5İstismar yok	Kahi has privilege-drop and socket/log permission issuesGo · github.com/kahiteam/kahi · CWE-271	Yüksek8,0	—	—	30 Haz 2026
31İzleyin	CVE-2022-3569Silahlaştırılmış	Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versionsynacor · zimbra collaboration suite · CWE-271 Yerel yetki yükseltme	Yüksek7,8	—	%0,7	17 Eki 2022
31İzleyin	CVE-2026-35535İstismar yok	In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailersudo project · sudo · CWE-271 Yerel yetki yükseltme	Yüksek7,8	—	%0,2	2 Nis 2026
31İzleyin	CVE-2025-53819İstismar yok	Nix's privilege dropping to build user broke for macOSnixos · nix · CWE-271 Yerel yetki yükseltme	Yüksek7,9	—	%0,1	14 Tem 2025
29İzleyin	CVE-2025-23395İstismar yok	Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit setCWE-271 Yerel yetki yükseltme	Yüksek7,3	—	%0,2	26 May 2025
27İzleyin	CVE-2024-35179İstismar yok	Unprivileged Stalwart Mail Server user can read files as rootstalwartlabs · mail-server · CWE-271 RCE	Orta6,8	—	%0,6	15 May 2024
23İzleyin	CVE-2026-25704İstismar yok	Incomplete privilege drop for com.system76.CosmicGreeter.GetUserDatapop-os · cosmic-greeter · CWE-271 Yerel yetki yükseltme Yarış durumu	Orta5,8	—	%0,1	30 Mar 2026
19İzleyin	CVE-2020-35513İstismar yok	A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the walinux · linux kernel · CWE-271 Hizmet dışı bırakma	Orta4,9	—	%1,3	26 Oca 2021

CVE-2023-22648
35İzleyin
A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they
YüksekCVSS 8,8İstismar yokEPSS %0
suse · rancher1 Haz 2023
CVE-2024-0985
33İzleyin
PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL
YüksekCVSS 8,0İstismar yokEPSS %2
- RCE
postgresql · postgresql8 Şub 2024
CVE-2019-11243
32İzleyin
In Kubernetes v1.12.0-v1.12.4 and v1.13.0, the rest.AnonymousClientConfig() method returns a copy of the provided config, with credentials r
YüksekCVSS 8,1İstismar yokEPSS %1
- Kimlik doğrulamasız
kubernetes · kubernetes22 Nis 2019
GHSA-55f6-4pr5-c7m5
32İzleyin
Kahi has privilege-drop and socket/log permission issues
YüksekCVSS 8,0İstismar yok
Go · github.com/kahiteam/kahi30 Haz 2026
CVE-2022-3569
31İzleyin
Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in version
YüksekCVSS 7,8SilahlaştırılmışEPSS %1
- Yerel yetki yükseltme
synacor · zimbra collaboration suite17 Eki 2022
CVE-2026-35535
31İzleyin
In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer
YüksekCVSS 7,8İstismar yokEPSS %0
- Yerel yetki yükseltme
sudo project · sudo2 Nis 2026
CVE-2025-53819
31İzleyin
Nix's privilege dropping to build user broke for macOS
YüksekCVSS 7,9İstismar yokEPSS %0
- Yerel yetki yükseltme
nixos · nix14 Tem 2025
CVE-2025-23395
29İzleyin
Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set
YüksekCVSS 7,3İstismar yokEPSS %0
- Yerel yetki yükseltme
26 May 2025
CVE-2024-35179
27İzleyin
Unprivileged Stalwart Mail Server user can read files as root
OrtaCVSS 6,8İstismar yokEPSS %1
- RCE
stalwartlabs · mail-server15 May 2024
CVE-2026-25704
23İzleyin
Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData
OrtaCVSS 5,8İstismar yokEPSS %0
- Yerel yetki yükseltme
- Yarış durumu
pop-os · cosmic-greeter30 Mar 2026
CVE-2020-35513
19İzleyin
A flaw incorrect umask during file or directory modification in the Linux kernel NFS (network file system) functionality was found in the wa
OrtaCVSS 4,9İstismar yokEPSS %1
- Hizmet dışı bırakma
linux · linux kernel26 Oca 2021

Tüm zafiyet sınıfları