CWE-270: Privilege Context Switching Error
The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- microsoft sharepoint server subscription edition, sharepoint server +1 more Microsoft Office SharePoint Elevation of Privilege Vulnerability 8.8 High
- openvpn connect Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS... 9.4 Critical
- huawei emui, harmonyos +1 more Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this... 7.7 High
- freepbx api, sangoma freepbx +1 more FreePBX API has a Privilege Escalation Error in GraphQL Allowing Authenticated Users to Access Additional Scopes 2.0 Low
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 24h2 +1 more +3 more Windows Administrator Protection Elevation of Privilege Vulnerability 7.8 High
- zephyrproject-rtos zephyr Userspace privilege escalation vulnerability on Cortex M 8.2 High
- wind river studio developer river studio developer Under heavy system utilization a random race condition can occur during authentication or token... 6.0 Medium
- gallagher command centre server A Privilege Context Switching Error (CWE-270) in the Command Center Server could allow a... 5.6 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right 5.1 Medium
- xwiki, xwiki xwiki-platform +1 more XWiki allows remote code execution through default value of wiki macro wiki-type parameters 8.7 High
- imagination technologies graphics ddk GPU DDK - rgxfw_write_robustness_buffer allows arbitrary catreg set mapping 7.9 High
- gitlab Privilege Context Switching Error in GitLab 6.7 Medium
- zephyrproject zephyr arch: riscv: userspace: potential security risk when CONFIG_RISCV_GP=y 9.4 Critical
- fortinet forticlient, forticlientwindows +1 more A privilege context switching error vulnerability [CWE-270] in FortiClient Windows version 7.2.4... 7.4 High
- duendesoftware duende.accesstokenmanagement HTTP Client uses incorrect token after refresh in Duende.AccessTokenManagement.OpenIdConnect 5.4 Medium
- aimeos ai-admin-graphql Aimeos GraphQL API admin interface denial of service vulnerability in SaaS and marketplace setups 5.5 Medium
- gitlab Privilege Context Switching Error in GitLab 6.7 Medium
- aimeos aimeos-core Aimeos denial of service vulnerability in SaaS and marketplace setups 5.5 Medium
- xwiki xwiki-rendering XWiki Rendering's footnote macro vulnerable to privilege escalation via the footnote macro 10.0 Critical
- apache airflow Apache Airflow: Privilege escalation using airflow logs 9.8 Critical
- xwiki, xwiki xwiki-platform +1 more XWiki Platform vulnerable to Remote Code Execution in Annotations 10.0 Critical
- red hat wildfly Privilege Context Switching Error in wildlfy 5.4 Medium
- linux kernel, ubuntu linux kernel, canonical ubuntu linux +2 more The overlayfs implementation in the linux kernel did not properly validate with respect to user... 8.8 High
- postgresql, debian linux +1 more Incorrect Comparison, Permissive List of Allowed Inputs, and Privilege Context Switching Error in PostgreSQL 7.5 High
- elastic elasticsearch Privilege Context Switching Error in Elasticsearch 3.1 Low
- elastic elasticsearch Improper privilege management in elasticsearch 6.5 Medium
- redhat openshift container platform, [red hat] openshift-ansible +1 more A flaw was found during the upgrade of an existing OpenShift Container Platform 3.x cluster.... 7.5 High
- red hat subscription-manager It was found that subscription-manager's DBus interface before 1.19.4 let unprivileged user... 8.2 High