CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft hpc pack 2019, windows app +1 moreMicrosoft High Performance Computing (HPC) Pack Elevation of Privilege Vulnerability8.8 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreOdh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles8.8 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreOdh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources8.8 High
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.4 +2 moreFeast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation5.5 Medium
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreData-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide8.7 High
- 0x5t4l1n nextor ip changerNexTOR IP Changer Unsafely Uses sudo and shell=True7.3 High
- telenia software tvoxTelenia TVox 26.5.3 Privilege Escalation via Insecure sudoers Configuration8.5 High
- enterprisedb pglogicalWhen applying replicated changes for a row that is missing one or more columns, pglogical...9.0 Critical
- rapid7 insight agent, insightvm, nexpose +2 moreRapid7 InsightVM, Nexpose, and Insight Agent Local Privilege Escalation via Unvalidated Executable Invocation7.8 High
- analog way picturall quad compact mark iiCVE-2026-149857.8 High
- canonical ubuntu 22.04 lts, ubuntu 24.04 lts, ubuntu 26.04 lts +2 moresnap-confine Local Privilege Escalation via Capabilities Misconfiguration or Flaw in Execution Environment Setup7.8 High
- canonical ubuntu 16.04 lts, ubuntu 18.04 lts, ubuntu 20.04 lts +3 more +5 moresnapd snap-confine Sandbox Confinement Bypass via Omission of setuid Restriction in Seccomp Templates8.4 High
- lenovo app storeA potential vulnerability was reported in Lenovo App Store, distributed exclusively in the...7.0 High
- red hat pen drive powered by red hat lightspeedRedhatinsights/incluster-checks: incluster-checks: privileged host-chroot debug pods created in shared default namespace enable privilege escalation to node root7.5 High
- xapiMultiple RBAC issues in XAPI9.4 Critical
- xapiMultiple RBAC issues in XAPI9.4 Critical
- xapiMultiple RBAC issues in XAPI9.4 Critical
- xapiMultiple RBAC issues in XAPI9.4 Critical
- xapiMultiple RBAC issues in XAPI9.4 Critical
- microsoft azure synapseMicrosoft Azure Synapse Elevation of Privilege Vulnerability9.9 Critical
- daytonaio daytonaDaytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape4.2 Medium
- red hat streams for apache kafka 2, streams for apache kafka 3.2.1, strimzi strimzi-kafka-operator +2 moreStrimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`8.0 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 moreCifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall7.8 High
- google chromeInappropriate implementation in Headless in Google Chrome prior to 149.0.7827.115 allowed a...9.6 Critical
- broadcom symantec endpoint protection cleanwipe removal toolLocal Privilege Escalation in Symantec Endpoint Protection macOS CleanWipe Removal Tool5.4 Medium
- fissionFission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation9.9 Critical
- fissionFission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container4.9 Medium
- siemens sinec insA vulnerability has been identified in SINEC INS (All versions < V1.0 SP2 Update 6). The affected...8.7 High
- actualbudget actualactual Allows Electron to Run As Node4.8 Medium
- google chromeInappropriate implementation in WebView in Google Chrome on Android prior to 149.0.7827.53...9.6 Critical
- red hat openshift container platform 4, openshift container platform 5 +1 moreCloud-credential-operator: cco mint-mode credentialsrequest manifests grant account-wide iam access beyond cluster scope on aws7.2 High
- forcepoint vpn clientLocal Privilege Escalation in VPN Client8.5 High
- acronis devicelock dlpLocal privilege escalation due to excessive permissions assigned to child processes. The...7.3 High
- metal3 ip-address-managerIPAM controller service account granted unnecessary full access to Secrets4.4 Medium
- ibm netezza performance server replication servicesVulnerabilities exists in IBM Netezza Performance Server Replication Services7.8 High
- fissionFission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables6.9 Medium
- fissionFission runtime pods automount the fission-fetcher service-account token into the user function container, granting function code namespace-wide secret / configmap read8.7 High
- broadcom automic automationAutomic Automation Agent Unix privilege escalation8.5 High
- cpanel, cpanel whm, wp squared +2 moreIncorrect privileges management and insufficient path filtering allow to read arbitrary file on...8.6 High
- f5 big-ip, big-iq, big-ip access policy manager +21 more +23 moreBIG-IP and BIG-IQ privilege escalation vulnerability8.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP scripted monitor vulnerability8.5 High
- kde plasma-login-managerThe new upstream added a privileged D-Bus helper called plasmaloginauthhelper, which suffers from...7.0 High
- microsoft dynamics 365, dynamics 365 (on-premises) version 9.1 +1 moreMicrosoft Dynamics 365 On-Premises Remote Code Execution Vulnerability9.1 Critical
- dell insightiq, powerscale insightiq +1 moreDell PowerScale InsightIQ, versions 5.0.0 through 6.2.0, contains an execution with unnecessary...6.7 Medium
- linuxfoundation cloudnativepg, cloudnative-pg, red hat openshift data foundation 4 +2 moreCloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE9.4 Critical
- binsoft mpcrm, mpfaktura, mpfirma +5 more +7 morePrivilege Escalation in multiple BinSoft products6.9 Medium
- dell alienware command center (awcc), alienware command center +1 moreDell Alienware Command Center (AWCC), versions prior to 6.13.8.0, contain an Execution with...6.7 Medium
- th30d4y openlearnxOpenLearnX has Critical Remote Code Execution Through Python Sandbox Escape via Code Execution Environment8.8 High
- openc3 cosmosOpenC3 COSMOS: Administrative Actions via the Script Runner Tool9.6 Critical
- oracle corporation java se, oracle jdk, jre +2 moreVulnerability in Oracle Java SE (component: Libraries). The supported version that is affected...3.7 Low
- Show moreLoading…