CWE-271

CVEs per yearBy the year they were published

1. 20191
2. 20211
3. 20221
4. 20232
5. 20242
6. 20252
7. 20263

Newest CVEs

• CVE-2026-44477

  CloudNativePG: Metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

  cloudnative-pg · cloudnative-pg

  Critical9.4
• CVE-2026-35535

  In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid, or setgroups call, during a privilege drop before running the mailer, is not a fatal…

  Sudo project · Sudo

  High7.4
• CVE-2026-25704

  Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData

  pop-os · cosmic-greeter

  Medium5.8
• CVE-2025-53819

  Nix's privilege dropping to build user broke for macOS

  NixOS · nix

  High7.9
• CVE-2025-23395

  Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

  screen

  High7.3
• CVE-2024-35179

  Unprivileged Stalwart Mail Server user can read files as root

  stalwartlabs · mail-server

  Medium6.8
• CVE-2024-0985

  PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

  PostgreSQL

  High8.0
• CVE-2023-38496

  Apptainer's ineffective privileges drop when requesting container network

  apptainer · apptainer

  Medium6.1
• CVE-2023-22648

  A Improper Privilege Management vulnerability in SUSE Rancher causes permission changes in Azure AD not to be reflected to users while they are logged in the…

  SUSE · Rancher

  High8.0
• CVE-2022-3569

  Due to an issue with incorrect sudo permissions, Zimbra Collaboration Suite (ZCS) suffers from a local privilege escalation issue in versions 9.0.0 and prior,…

  Synacor · Zimbra Collaboration Suite (ZCS)

  High7.8

Vendors it comes up for most

1. Kubernetes1
2. NixOS1
3. SUSE1
4. Sudo project1
5. Synacor1
6. apptainer1
7. cloudnative-pg1
8. pop-os1
9. stalwartlabs1