CWE-282
31 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- Published CVEs
- 31
- Last 12 months
- 7
- Critical
- 0
- Known exploited
- 1
Critical 0High 12Medium 18Low 1Not scored 0
CVEs per yearBy the year they were published
- 20181
- 20223
- 20232
- 20248
- 202511
- 20266
Known exploitedNewest addition to KEV first
- CVE-2023-0386
A flaw was found in the Linux kernel, where unauthorized access to the execution of the setuid file with capabilities was found in the Linux kernel’s OverlayFS…
Kernel
ExploitedHigh7.8
Newest CVEs
- CVE-2026-108304
Tanium addressed a local privilege escalation vulnerability in End-User Notifications.
Tanium · Endpoint Configuration Toolset Solution
High7.8 - CVE-2026-86769
Snipe-IT before 8.7.0 Audit Log Misattribution via Consumables Checkout
grokability · snipe-it
Medium5.3 - CVE-2026-50130
Pi-hole: Local privilege escalation from `pihole` user to root via `/etc/pihole/logrotate`
pi-hole · pi-hole
High8.8 - CVE-2026-40214
In OpenStack Cyborg before 16.0.1, the Accelerator Request (ARQ) API does not enforce project ownership at any layer. The project_id column in the database is…
OpenStack · Cyborg
Medium6.3 - CVE-2026-3867
An improper ownership management vulnerability has been identified in Moxa’s Secure Router. Because of improper ownership management, a low-privileged…
Moxa · EDR-8010 Series
Medium6.0 - CVE-2026-23514
Kiteworks Core before 9.2.2 is vulnerable to Improper Ownership Management
kiteworks · core
High8.8 - CVE-2025-67642
Jenkins HashiCorp Vault Plugin 371.v884a_4dd60fb_6 and earlier does not set the appropriate context for Vault credentials lookup, allowing attackers with…
Jenkins Project · Jenkins HashiCorp Vault Plugin
Medium4.3 - CVE-2025-57732
In JetBrains TeamCity before 2025.07.1 privilege escalation was possible due to incorrect directory ownership
JetBrains · TeamCity
High7.5 - CVE-2025-1112
IBM OpenPages with Watson information disclosure
IBM · OpenPages with Watson
Medium4.3 - CVE-2025-46416
The Nix, Lix, and Guix package managers allow a bypass of build isolation in which a user can elevate their privileges to the build user account (e.g., nixbld…
NixOS · Nix
Low2.9