CWE-273

49 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.

Critical 8High 32Medium 6Low 3Not scored 0

CVEs per yearBy the year they were published

CVE-2024-38813
Privilege escalation vulnerability
VMware vCenter Server
ExploitedHigh7.5

CVE-2026-86385
Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8, contain an Improper Check for Dropped Privileges vulnerability. A low privileged…
Dell · PowerProtect Data Domain
High8.8
CVE-2026-101306
Multiple jail filesystem root escapes
FreeBSD · FreeBSD
Critical9.8
CVE-2026-101305
Multiple jail filesystem root escapes
FreeBSD · FreeBSD
High8.8
CVE-2026-101304
Multiple jail filesystem root escapes
FreeBSD · FreeBSD
High7.1
CVE-2026-80047
Hugging Face Transformers library writes remote code to disk prior to consent check
Hugging Face · Transformers
High7.8
CVE-2026-58089
hwpmc fails to detach PMCs during exec credential transitions
FreeBSD · FreeBSD
High7.8
CVE-2026-61897
accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts
Canonical · accountsservice
High7.8
CVE-2026-58086
ktrace(2) privilege incorrectly validated in jails
FreeBSD · FreeBSD
High8.1
CVE-2026-49421
unlinkat(2) ignores AT_RESOLVE_BENEATH flag
FreeBSD · FreeBSD
High7.1
CVE-2026-54552
sh _uid does not drop supplementary groups (incomplete privilege drop)
amoffat · sh
High7.9