CWE-842

12 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 0High 9Medium 3Low 0Not scored 0

CVEs per yearBy the year they were published

CVE-2026-102585
Moodle: group validation missing when enrolling user to course
moodle
Medium4.3
CVE-2026-73439
Security Advisory 0164
Arista Networks · EOS
High7.7
CVE-2026-6970
authd Denial of Service and Local Privilege Escalation
Canonical · authd
High7.3
CVE-2024-10082
CodeChecker is an analyzer tooling, defect database and viewer extension for the Clang Static Analyzer and Clang Tidy. Authentication method confusion allows…
Ericsson · CodeChecker
High8.7
CVE-2024-9412
Improper Authorization Vulnerability in Rockwell Automation Verve® Asset Manager
Rockwell Automation · Verve® Asset Manager
High8.4
CVE-2024-25632
Unauthorised granting of administrator privileges over arbitrary teams under certain circumstances
elabftw · elabftw
High8.6
CVE-2023-25575
Secured properties in API Platform Core may be accessible within collections
api-platform · core
High7.7
CVE-2022-45097
Dell PowerScale OneFS 9.0.0.x-9.4.0.x contains an Incorrect User Management vulnerability. A low privileged network attacker could potentially exploit this…
Dell · PowerScale OneFS
Medium6.3
CVE-2022-3650
A privilege escalation flaw was found in Ceph. Ceph-crash.service allows a local attacker to escalate privileges to root in the form of a crash dump, and dump…
Ceph
High7.8
CVE-2022-2990
An incorrect handling of the supplementary groups in the Buildah container engine might lead to the sensitive information disclosure or possible data…
buildah
High7.1