CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- hp inc. omen gaming hubHP System Optimizer - Escalation of Privilege7.3 High
- juniper junos, junos os evolved, juniper networks junos os +2 moreJunos OS and Junos OS Evolved: When an unsigned Python op script configuration is present, a local low privileged user can compromise the system8.5 High
- elastic kibanaExecution with Unnecessary Privileges in Kibana Leading to reading index data beyond their direct Elasticsearch RBAC scope7.7 High
- ibm security verify access, security verify access container, verify identity access +1 more +3 moreSecurity Vulnerabilities have been found in IBM Verify Identity Access and IBM Security Verify Access9.3 Critical
- arm mbed tlsAn issue was discovered in Mbed TLS versions from 2.19.0 up to 3.6.5, Mbed TLS 4.0.0....9.8 Critical
- percona monitoring and managementAn issue was discovered in Percona PMM before 3.7. Because an internal database user retains...9.9 Critical
- geovision gv-edge recording managerGeoVision ERM Improper Privilege Assignment Leads to SYSTEM-Level Privilege10.0 Critical
- xcitium openedrA local attacker can bypass OpenEDR's 2.5.1.0 self-defense mechanism by renaming a malicious...7.8 High
- forcepoint ngfw engine, next generation firewall +1 moreLocal Privilege Escalation in NGFW Engine7.3 High
- assa abloy visionlineLocal Privilege Escalation Due to Writable Executable in Privileged Visionline Service Path5.8 Medium
- olivetinOliveTin: RestartAction always runs actions as guest5.3 Medium
- cisco secure firewall threat defense (ftd) software, secure firewall threat defense +1 moreCisco Secure FTD Software Authenticated Command Injection Vulnerability6.0 Medium
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1,...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1,...6.7 Medium
- dell powerscale onefsDell PowerScale OneFS, versions prior to 9.10.1.6 and versions 9.11.0.0 through 9.12.0.1,...6.7 Medium
openclawnpmOpenClaw has multiple E2E/test Dockerfiles that run all processes as root8.4 High- asfhtgkdavid theshittheshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution8.4 High
- cisco unified computing system (managed)Cisco UCS Manager File Write Vulnerability4.4 Medium
- bleon-ethical api-gateway-deployapi-gateway-deploy Affected by Exploitable Command Injection via Unprivileged Root Execution9.2 Critical
- openclawOpenClaw: Docker container escape via unvalidated bind mount config injection7.7 High
- genetec inc. sipeliaLocal privilege escalation in Genetec Sipelia Plugin. An authenticated low-privileged Windows...5.8 Medium
- nixos nixpkgsPrivilege escalation to the `CAP_NET_RAW` capability via the `programs.captive-browser` NixOS module5.8 Medium
- gigabyte macrohubGIGABYTE｜MacroHub - Local Privilege Escalation8.5 High
- blakeblackshear frigateFrigate Affected by Authenticated Remote Command Execution (RCE) and Container Escape9.1 Critical
- ibm common cryptographic architecture, 4769 developers toolkit +1 moreIBM Common Cryptographic Architecture Arbitrary Command Execution9.8 Critical
- f5 big-ip container ingress servicesBIG-IP Container Ingress Services vulnerability6.9 Medium
- brocade fabric os, broadcom fabric operating system +1 morePassword Exposure in Brocade Fabric OS6.0 Medium
- brocade fabric os, broadcom fabric operating system +1 morePrivilege escalation via bind command in Brocade Fabric OS8.4 High
- ibm db2, db2 for linux, unix and windows +1 moreIBM Db2 Privilege Escalation7.2 High
- danofficeit local admin serviceLocal Privilege Escalation in Local Admin Service7.1 High
- ibm business automation workflow containers, business automation workflow +1 moreMultiple security vulnerabilities are addressed in IBM Business Automation Workflow Containers fixes December 20254.7 Medium
- zalando skipperSkipper arbitrary code execution through lua filters8.8 High
- anaconda dask, dask distributed +1 moreDask distributed Vulnerable to Remote Code Execution via Jupyter Proxy and Dashboard5.3 Medium
- siemens telecontrol server basicA vulnerability has been identified in TeleControl Server Basic (All versions < V3.1.2.4)....7.3 High
- servicenow now assist ai agents, virtual agent api +1 moreUnauthenticated Privilege Escalation in ServiceNow AI Platform9.3 Critical
- dell secure connect gateway, secure connect gateway (scg) appliance, secure connect gateway (scg) application +2 moreDell Secure Connect Gateway (SCG) 5.0 Appliance and Application, version(s) versions 5.26 to 5.30...6.4 Medium
- moxa nport 6100-g2/6200-g2 seriesThe NPort 6100-G2/6200-G2 Series is affected by an execution with unnecessary privileges...7.7 High
- nvidia isaac launchableNVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with...9.8 Critical
- nvidia isaac launchableNVIDIA Isaac Launchable contains a vulnerability where an attacker could cause an execution with...9.8 Critical
- versa networks sase client for windows, versa-networks sase client +1 moreVersa SASE Client for Windows < 7.9.5 Arbitrary Folder Deletion Leading to Local Privilege Escalation8.5 High
- inductive automation ignitionInductive Automation Ignition Execution with Unnecessary Privileges7.3 High
- sonicwall sma1000, sma1000 appliance, sma6200 firmware +4 more +6 moreA local privilege escalation vulnerability due to insufficient authorization in the SonicWall...6.6 Medium
- radiometer medical aps abl800 basic and abl800 flex analyzers, abl90 flex and abl90 flex plus analyzers, aqt90 flex analyzers +2 moreCredential Disclosure vulnerability in Radiometer Products8.4 High
- nebim neyir computer industry and services inc. v3 erpImproper Authorization in Nebim Neyir's Nebim V3 ERP8.8 High
- neuron-ai neuron, neuron-core neuron-ai +1 moreMySQLWriteTool allows arbitrary/destructive SQL when exposed to untrusted prompts (agent “footgun”)9.4 Critical
- google androidIn sendCommand of MediaSessionRecord.java, there is a possible way to launch the foreground...7.8 High
- suse opensuseA Execution with Unnecessary Privileges vulnerability in lightdm-kde-greeter allows escalation...5.3 Medium
- axis communications ab osThe VAPIX Edge storage API that allowed a privilege escalation, enabling a VAPIX administrator...6.4 Medium
- dell display and peripheral managerDell Display and Peripheral Manager, versions prior to 2.1.2.12, contains an Execution with...7.3 High
- ibm db2IBM Db2 privilege escalation7.4 High
- Show moreLoading…