CWE-250
396 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- Published CVEs
- 396
- Last 12 months
- 146
- Critical
- 71
- Known exploited
- 2
Critical 71High 216Medium 100Low 8Not scored 1
CVEs per yearBy the year they were published
- 20181
- 202010
- 202224
- 202475
- 202435
- 202522
- 202510
- 202510
- 2026117
- 202692
Known exploitedNewest addition to KEV first
- CVE-2025-40602
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
SonicWall · SMA1000
ExploitedMedium6.6 - CVE-2024-38813
Privilege escalation vulnerability
VMware vCenter Server
ExploitedHigh7.5
Newest CVEs
- CVE-2026-121234
Privilege elevation in Contacts in Google Chrome on on Android prior to 157.0.8103.38 allowed a remote attacker to potentially execute arbitrary code outside…
Google · Chrome
Critical9.6 - CVE-2026-121196
Privilege elevation in Mobile in Google Chrome on on iOS prior to 157.0.8103.38 allowed a remote attacker to bypass system access restrictions into a…
Google · Chrome
Not scored - CVE-2026-94290
Privilege escalation to cluster-admin on the Rancher local cluster through Fleet's agent management controller
SUSE · Rancher
Critical9.1 - CVE-2026-40573
NovumOS: Nova Interpreter Privilege Escalation
MinecAnton209 · NovumOS
High8.6 - CVE-2025-30046
Remote Code Execution in CGM CLININET
CGM · CGM CLININET
Critical9.0 - CVE-2026-91335
Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition product of Oracle Java SE (component: AWT). Supported versions…
Oracle Corporation · Oracle Java SE
Low2.6 - CVE-2026-113342
Privilege elevation in Network in Google Chrome prior to 156.0.8078.47 allowed a remote attacker leveraging social engineering to bypass web origin policy via…
Google · Chrome
Critical9.6 - CVE-2026-113221
Privilege elevation in Google Lens in Google Chrome prior to 156.0.8078.47 allowed a remote attacker who had compromised the renderer process to obtain…
Google · Chrome
High8.8 - CVE-2026-104795
Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution
Red Hat · Red Hat OpenShift Container Platform 4.19
High8.8 - CVE-2026-110150
Privilege elevation in Installer in Google Chrome on on Windows prior to 155.0.8059.79 allowed a local attacker to obtain sensitive information via a local…
Google · Chrome
Medium5.5