CWE-280
177 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 177
- Last 12 months
- 62
- Critical
- 8
- Known exploited
- 1
Critical 8High 75Medium 84Low 10Not scored 0
CVEs per yearBy the year they were published
- 20131
- 20193
- 20203
- 20215
- 202217
- 202311
- 202441
- 202540
- 202656
Known exploitedNewest addition to KEV first
- CVE-2024-29748
there is a possible way to bypass due to a logic error in the code. This could lead to local escalation of privilege with no additional execution privileges…
Google · Android
ExploitedHigh7.8
Newest CVEs
- CVE-2026-20599
In Modem, there is a possible escalation of privilege due to a missing permission check. This could lead to local escalation of privilege if a malicious actor…
MediaTek, Inc. · MediaTek chipset
Medium6.7 - CVE-2026-20577
In Modem, there is a possible permission bypass due to a permissions bypass. This could lead to local denial of service if a malicious actor has already…
MediaTek, Inc. · MediaTek chipset
Medium4.4 - CVE-2026-3322
Privilege escalation via request replaying in Lobster_pro
Lobster DATA GmbH · Lobster_pro
Medium5.6 - CVE-2026-63792
Gitea private reusable workflow disclosure to fork runs
Gitea · Gitea
Medium5.3 - CVE-2026-21121
Improper handling of insufficient permission in CmcCore prior to SMR Oct-2026 Release 1 allows local attackers to use the privileged APIs.
Samsung Mobile · Samsung Mobile Devices
Medium6.9 - CVE-2026-79403
An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary code via the permission/allow-everything endpoint
Product not named
High8.4 - CVE-2026-56729
Zammad: Titles of knowledge base answers will be shown across all categories via the global search
zammad · zammad
Low2.1 - CVE-2026-96872
WikiLambda public function execution bypasses the unsaved-code permission through nested Z825 compositions
The Wikimedia Foundation · Mediawiki - WikiLambda Extension
Low2.9 - CVE-2026-90462
Sssd: sssd: fail-open in ldap ppolicy access check allows continued authorization
Red Hat · Red Hat Enterprise Linux 10
Medium5.4 - CVE-2026-54471
Dell SmartFabric Manager, versions prior to 2.2.1, contains an Improper Handling of Insufficient Permissions or Privileges vulnerability. A low privileged…
Dell · SmartFabric Manager
Low3.5