CWE-279

26 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 1High 11Medium 12Low 2Not scored 0

CVEs per yearBy the year they were published

CVE-2026-46388
osquery: Unprivileged users can temporarily read file carve contents
osquery · osquery
Medium4.4
CVE-2026-4948
Firewalld: firewalld: local unprivileged user can modify firewall state due to d-bus setter mis-authorization
Red Hat · Red Hat Enterprise Linux 10
Medium5.5
CVE-2026-20062
A vulnerability in the CLI of Cisco Secure Firewall Adaptive Security Appliance (ASA) Software in multiple context mode could allow an authenticated, local…
Cisco · Cisco Secure Firewall Adaptive Security Appliance (ASA) Software
High7.2
CVE-2025-12801
Nfs-utils: rpc.mountd in the nfs-utils privilege escalation
Red Hat · Red Hat Enterprise Linux 10
Medium6.5
CVE-2025-14025
Ansible-automation-platform/aap-gateway: aap-gateway: read-only personal access token (pat) bypasses write restrictions
Red Hat · Red Hat Ansible Automation Platform 2.5 for RHEL 8
High8.5
CVE-2025-36228
Incorrect Execution-Assigned Permissions in IBM Aspera Faspex
IBM · Aspera Faspex 5
Low3.8
CVE-2025-13663
Quartus Prime Pro Edition Installer Advisory
Altera · Quartus Prime Pro
Medium5.4
CVE-2024-25621
containerd affected by a local privilege escalation via wide permissions on CRI directory
containerd · containerd
High7.3
CVE-2025-30001
Apache StreamPark: Authenticated users can trigger remote command execution
Apache Software Foundation · Apache StreamPark
High7.3
CVE-2025-58437
Coder's privilege escalation vulnerability could lead to a cross workspace compromise
coder · coder
High8.1