Vulnerabilities

Aggregated CVE / GHSA / KEV / OSV — filter by tag and category.

Filtering: Tag: privilege-escalation Clear
ID Title
CVE-2025-6018 Authorization Flaw in privilege-escalation (CVE-2025-6018)
vulnerability in privilege-escalation (CVE-2025-6018). Successful exploitation can lead to full system takeover.
CVE-2025-44654 Vulnerability in privilege-escalation (CVE-2025-44654)
vulnerability in privilege-escalation (CVE-2025-44654). Successful exploitation can lead to full system takeover.
CVE-2025-44655 Vulnerability in privilege-escalation (CVE-2025-44655)
vulnerability in privilege-escalation (CVE-2025-44655). Successful exploitation can lead to full system takeover.
CVE-2025-44657 Vulnerability in privilege-escalation (CVE-2025-44657)
vulnerability in privilege-escalation (CVE-2025-44657). Risk of unauthorized operations or information disclosure.
CVE-2025-4040 Vulnerability in privilege-escalation (CVE-2025-4040)
vulnerability in privilege-escalation (CVE-2025-4040). Confidential information can be exposed externally.
CVE-2025-4334 Privilege Escalation in wordpress (CVE-2025-4334)
vulnerability in wordpress (CVE-2025-4334). Successful exploitation can lead to full system takeover.
CVE-2025-6019 Vulnerability in privilege-escalation (CVE-2025-6019)
vulnerability in privilege-escalation (CVE-2025-6019). Successful exploitation can lead to full system takeover.
CVE-2025-4404 Vulnerability in privilege-escalation (CVE-2025-4404)
vulnerability in privilege-escalation (CVE-2025-4404). Successful exploitation can lead to full system takeover. Exploitable via ``krbCanonicalName``.
CVE-2025-4211 Vulnerability in privilege-escalation (CVE-2025-4211)
vulnerability in privilege-escalation (CVE-2025-4211). Risk of unauthorized operations or information disclosure.
CVE-2025-46836 Vulnerability in c (CVE-2025-46836)
vulnerability in c (CVE-2025-46836). Risk of unauthorized operations or information disclosure. Exploitable via ``interface.c``.
CVE-2025-2786 Information Disclosure in github.com/grafana/tempo-operator (CVE-2025-2786)
vulnerability in github.com/grafana/tempo-operator (CVE-2025-2786). Risk of unauthorized operations or information disclosure. Mitigation: upgrade to `0.16.0` or later.
CVE-2025-24170 A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
A logic issue was addressed with improved file handling. This issue is fixed in macOS Ventura 13...
CVE-2025-2241 Vulnerability in privilege-escalation (CVE-2025-2241)
vulnerability in privilege-escalation (CVE-2025-2241). Confidential information can be exposed externally.
CVE-2025-25968 Vulnerability in privilege-escalation (CVE-2025-25968)
vulnerability in privilege-escalation (CVE-2025-25968). Risk of unauthorized operations or information disclosure.
CVE-2025-21702 Vulnerability in privilege-escalation (CVE-2025-21702)
vulnerability in privilege-escalation (CVE-2025-21702). Successful exploitation can lead to full system takeover. Exploitable via ``NET_XMIT_CN``.
CVE-2025-21692 Vulnerability in c (CVE-2025-21692)
vulnerability in c (CVE-2025-21692). Successful exploitation can lead to full system takeover.
CVE-2024-12747 Vulnerability in privilege-escalation (CVE-2024-12747)
vulnerability in privilege-escalation (CVE-2024-12747). Confidential information can be exposed externally.
CVE-2024-55550 KEV [KEV] Path Traversal in Mitel micollab (CVE-2024-55550)
path traversal in Mitel micollab (CVE-2024-55550). Risk of unauthorized operations or information disclosure. Listed in CISA KEV — actively exploited.
CVE-2024-52336 Privilege Escalation in privilege-escalation (CVE-2024-52336)
vulnerability in privilege-escalation (CVE-2024-52336). Successful exploitation can lead to full system takeover. Exploitable via ``script_pre``.
CVE-2024-8781 Vulnerability in privilege-escalation (CVE-2024-8781)
vulnerability in privilege-escalation (CVE-2024-8781). Risk of unauthorized operations or information disclosure.
CVE-2024-9474 KEV [KEV] OS Command Injection in Palo alto networks palo-alto-networks (CVE-2024-9474)
OS command injection in Palo alto networks palo-alto-networks (CVE-2024-9474). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-0012 KEV [KEV] Vulnerability in Palo alto networks palo-alto-networks (CVE-2024-0012)
vulnerability in Palo alto networks palo-alto-networks (CVE-2024-0012). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2024-10035 Command Injection in privilege-escalation (CVE-2024-10035)
command injection in privilege-escalation (CVE-2024-10035). Successful exploitation can lead to full system takeover.
CVE-2024-50066 Vulnerability in privilege-escalation (CVE-2024-50066)
vulnerability in privilege-escalation (CVE-2024-50066). Successful exploitation can lead to full system takeover.
CVE-2024-9050 Code Injection in privilege-escalation (CVE-2024-9050)
code injection in privilege-escalation (CVE-2024-9050). Successful exploitation can lead to full system takeover. Exploitable via ``leftupdown``.
CVE-2024-8698 Vulnerability in privilege-escalation (CVE-2024-8698)
vulnerability in privilege-escalation (CVE-2024-8698). Confidential information can be exposed externally.
CVE-2022-23817 Vulnerability in privilege-escalation (CVE-2022-23817)
vulnerability in privilege-escalation (CVE-2022-23817). Risk of unauthorized operations or information disclosure.
CVE-2024-4944 Command Injection in privilege-escalation (CVE-2024-4944)
command injection in privilege-escalation (CVE-2024-4944). Successful exploitation can lead to full system takeover.
CVE-2024-1086 KEV [KEV] Use-After-Free in Linux kernel (CVE-2024-1086)
vulnerability in Linux kernel (CVE-2024-1086). Successful exploitation can lead to full system takeover. Listed in CISA KEV — actively exploited.
CVE-2023-6246 Vulnerability in privilege-escalation (CVE-2023-6246)
vulnerability in privilege-escalation (CVE-2023-6246). Successful exploitation can lead to full system takeover.
CVE-2023-6931 Out-of-Bounds Write in privilege-escalation (CVE-2023-6931)
out-of-bounds write in privilege-escalation (CVE-2023-6931). Successful exploitation can lead to full system takeover.
CVE-2023-6932 Use-After-Free in privilege-escalation (CVE-2023-6932)
vulnerability in privilege-escalation (CVE-2023-6932). Successful exploitation can lead to full system takeover.
CVE-2023-6817 Use-After-Free in privilege-escalation (CVE-2023-6817)
vulnerability in privilege-escalation (CVE-2023-6817). Successful exploitation can lead to full system takeover.
CVE-2023-47322 Cross-Site Request Forgery (CSRF) in csrf (CVE-2023-47322)
vulnerability in csrf (CVE-2023-47322). Successful exploitation can lead to full system takeover.
CVE-2023-6377 Out-of-Bounds Read in privilege-escalation (CVE-2023-6377)
vulnerability in privilege-escalation (CVE-2023-6377). Successful exploitation can lead to full system takeover.
CVE-2023-4664 Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...
Incorrect Default Permissions vulnerability in Saphira Saphira Connect allows Privilege...
CVE-2023-4665 Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...
Incorrect Execution-Assigned Permissions vulnerability in Saphira Saphira Connect allows...
CVE-2023-4244 Use-After-Free in privilege-escalation (CVE-2023-4244)
vulnerability in privilege-escalation (CVE-2023-4244). Successful exploitation can lead to full system takeover.
CVE-2023-3374 Vulnerability in privilege-escalation (CVE-2023-3374)
vulnerability in privilege-escalation (CVE-2023-3374). Successful exploitation can lead to full system takeover.
CVE-2023-39004 Vulnerability in privilege-escalation (CVE-2023-39004)
vulnerability in privilege-escalation (CVE-2023-39004). Successful exploitation can lead to full system takeover.
CVE-2023-3609 Use-After-Free in privilege-escalation (CVE-2023-3609)
vulnerability in privilege-escalation (CVE-2023-3609). Successful exploitation can lead to full system takeover.
CVE-2023-3390 Use-After-Free in c (CVE-2023-3390)
vulnerability in c (CVE-2023-3390). Successful exploitation can lead to full system takeover.
CVE-2023-34671 Vulnerability in privilege-escalation (CVE-2023-34671)
vulnerability in privilege-escalation (CVE-2023-34671). Successful exploitation can lead to full system takeover.
CVE-2023-33779 Authorization Flaw in privilege-escalation (CVE-2023-33779)
vulnerability in privilege-escalation (CVE-2023-33779). Successful exploitation can lead to full system takeover.
CVE-2023-2235 Use-After-Free in privilege-escalation (CVE-2023-2235)
vulnerability in privilege-escalation (CVE-2023-2235). Successful exploitation can lead to full system takeover.
CVE-2023-1829 Use-After-Free in privilege-escalation (CVE-2023-1829)
vulnerability in privilege-escalation (CVE-2023-1829). Successful exploitation can lead to full system takeover.
CVE-2023-1281 Use-After-Free in privilege-escalation (CVE-2023-1281)
vulnerability in privilege-escalation (CVE-2023-1281). Successful exploitation can lead to full system takeover.
CVE-2021-32415 Vulnerability in privilege-escalation (CVE-2021-32415)
vulnerability in privilege-escalation (CVE-2021-32415). Successful exploitation can lead to full system takeover.
CVE-2022-46152 OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The funct...
OP-TEE Trusted OS is the secure side implementation of OP-TEE project, a Trusted Execution Environment. Versions prior to 3.19.0, contain an Improper Validation of Array Index vulnerability. The function `cleanup_shm_refs()` is called by both `entry_invoke_command()` and `entry_open_session()`. The...
CVE-2022-37721 Cross-Site Scripting (XSS) in privilege-escalation (CVE-2022-37721)
cross-site scripting in privilege-escalation (CVE-2022-37721). Successful exploitation can lead to full system takeover.

🍪 About cookies

We use cookies to keep you logged in, remember your language, and improve the service.

Details →