High
CVE-2021-31607
In SaltStack Salt 2016.9 through 3002.6, a command injection vulnerability exists in the snapper module that allows for local privilege escalation on a minion. The attack requires that a file is crea…
Tag: Privilege Escalation
All CVEs associated with "Privilege Escalation". Page 39/66 • 7823 CVEs.
Subscribe CVEs: RSS for “Privilege Escalation” · RSS (High+Critical only)
About “Privilege Escalation”
A curated feed of “Privilege Escalation”-related CVEs appears below. We currently track 7823 CVEs for this tag (all time). In the last 365 days, 1227 were published. Average CVSS is 7.7 (all time; 7.9 over 365d), and 84% are rated High/Critical (all time). Top CWEs (last 365 days): CWE-269 - Improper Privilege Management, CWE-266 - Incorrect Privilege Assignment, CWE-862 - Missing Authorization.
In our taxonomy this topic maps to a LOW impact class. Vendor advisories and release notes are key. Verify compatibility matrices, prefer supported long term versions, and stage rollouts with monitoring. Use the filters below to sort by CVSS, risk and CWE. Each detail page highlights vendor advisories and mitigation tips.
CVEs tagged with this topic. Filters apply to the whole list (loaded from JSON).
CVSS ≥ 0.0
2021-04-23
2021-04-22
High
CVE-2021-28648
Trend Micro Antivirus for Mac 2020 v10.5 and 2021 v11 (Consumer) is vulnerable to an improper access control privilege escalation vulnerability that could allow an attacker to establish a connection…
Medium
CVE-2021-0255
A local privilege escalation vulnerability in ethtraceroute of Juniper Networks Junos OS may allow a locally authenticated user with shell access to escalate privileges and write to the local filesys…
Medium
CVE-2021-23133
A race condition in Linux kernel SCTP sockets (net/sctp/socket.c) before 5.12-rc8 can lead to kernel privilege escalation from the context of a network service or an unprivileged process. If sctp_des…
2021-04-20
Medium
CVE-2021-21526
Dell PowerScale OneFS 8.1.0 - 9.1.0 contains a privilege escalation in SmartLock compliance mode that may allow compadmin to execute arbitrary commands as root.
Medium
CVE-2021-1079
NVIDIA GeForce Experience, all versions prior to 3.22, contains a vulnerability in GameStream plugins where log files are created using NT/System level permissions, which may lead to code execution,…
2021-04-19
High
CVE-2021-21981
VMware NSX-T contains a privilege escalation vulnerability due to an issue with RBAC (Role based access control) role assignment. Successful exploitation of this issue may allow attackers with local…
Medium
CVE-2021-21070
Adobe Robohelp version 2020.0.3 (and earlier) is affected by an uncontrolled search path element vulnerability that could lead to privilege escalation. An attacker with admin permissions to write to…
2021-04-15
High
CVE-2021-21100
Adobe Digital Editions version 4.5.11.187245 (and earlier) is affected by a Privilege Escalation vulnerability during installation. An unauthenticated attacker could leverage this vulnerability to ac…
High
CVE-2021-23887
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) Endpoint for Windows prior to 11.6.100 allows a local, low privileged, attacker to write to arbitrary controlled kernel address…
2021-04-14
Medium
CVE-2021-29449
Pi-hole is a Linux network-level advertisement and Internet tracker blocking application. Multiple privilege escalation vulnerabilities were discovered in version 5.2.4 of Pi-hole core. See the refer…
High
CVE-2021-28098
An issue was discovered in Forescout CounterACT before 8.1.4. A local privilege escalation vulnerability is present in the logging function. SecureConnector runs with administrative privileges and wr…
High
CVE-2021-27608
An unquoted service path in SAPSetup, version - 9.0, could lead to privilege escalation during the installation process that is performed when an executable file is registered. This could further lea…
2021-04-13
Medium
CVE-2021-3462
A privilege escalation vulnerability in Lenovo Power Management Driver for Windows 10, prior to version 1.67.17.54, that could allow unauthorized access to the driver's device object.
High
CVE-2021-29428
In Gradle before version 7.0, on Unix-like systems, the system temporary directory can be created with open permissions that allow multiple users to create and delete files within it. Gradle builds c…
High
CVE-2021-28458
Azure ms-rest-nodeauth Library Elevation of Privilege Vulnerability
High
CVE-2021-28440
Windows Installer Elevation of Privilege Vulnerability
High
CVE-2021-28436
Windows Speech Runtime Elevation of Privilege Vulnerability
High
CVE-2021-28351
Windows Speech Runtime Elevation of Privilege Vulnerability
High
CVE-2021-28347
Windows Speech Runtime Elevation of Privilege Vulnerability
High
CVE-2021-28322
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
High
CVE-2021-28321
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
High
CVE-2021-28320
Windows Resource Manager PSM Service Extension Elevation of Privilege Vulnerability
High
CVE-2021-28314
Windows Hyper-V Elevation of Privilege Vulnerability
High
CVE-2021-28313
Diagnostics Hub Standard Collector Service Elevation of Privilege Vulnerability
High
CVE-2021-28310
Win32k Elevation of Privilege Vulnerability
High
CVE-2021-27096
NTFS Elevation of Privilege Vulnerability
High
CVE-2021-27091
RPC Endpoint Mapper Service Elevation of Privilege Vulnerability
High
CVE-2021-27090
Windows Secure Kernel Mode Elevation of Privilege Vulnerability
High
CVE-2021-27088
Windows Event Tracing Elevation of Privilege Vulnerability
High
CVE-2021-27086
Windows Services and Controller App Elevation of Privilege Vulnerability
High
CVE-2021-27072
Win32k Elevation of Privilege Vulnerability
High
CVE-2021-27064
Visual Studio Installer Elevation of Privilege Vulnerability
High
CVE-2021-26415
Windows Installer Elevation of Privilege Vulnerability
High
CVE-2020-27228
An incorrect default permissions vulnerability exists in the installation functionality of OpenClinic GA 5.173.3. Overwriting the binary can result in privilege escalation. An attacker can replace a…
2021-04-12
High
CVE-2021-21545
Dell Peripheral Manager 1.3.1 or greater contains remediation for a local privilege escalation vulnerability that could be potentially exploited to gain arbitrary code execution on the system with pr…
2021-04-09
High
CVE-2020-13534
A privilege escalation vulnerability exists in Dream Report 5 R20-2. COM Class Identifiers (CLSID), installed by Dream Report 5 20-2, reference LocalServer32 and InprocServer32 with weak privileges w…
High
CVE-2020-13533
A privilege escalation vulnerability exists in Dream Report 5 R20-2. IIn the default configuration, the following registry keys, which reference binaries with weak permissions, can be abused by attac…
High
CVE-2020-13532
A privilege escalation vulnerability exists in Dream Report 5 R20-2. In the default configuration, the Syncfusion Dashboard Service service binary can be replaced by attackers to escalate privileges…
High
CVE-2021-29221
A local privilege escalation vulnerability was discovered in Erlang/OTP prior to version 23.2.3. By adding files to an existing installation's directory, a local attacker could hijack accounts of oth…
2021-04-08
High
CVE-2021-27522
Learnsite 1.2.5.0 contains a remote privilege escalation vulnerability in /Manager/index.aspx through the JudgIsAdmin() function. By modifying the initial letter of the key of a user cookie, the key…
2021-04-07
High
CVE-2021-26758
Privilege Escalation in LiteSpeed Technologies OpenLiteSpeed web server version 1.7.8 allows attackers to gain root terminal access and execute commands on the host system.
2021-04-05
Medium
CVE-2021-24156
Stored Cross-Site Scripting vulnerabilities in Testimonial Rotator 3.0.3 allow low privileged users (Contributor) to inject arbitrary JavaScript code or HTML without approval. This could lead to priv…
2021-03-31
Medium
CVE-2021-22538
A privilege escalation vulnerability impacting the Google Exposure Notification Verification Server (versions prior to 0.23.1), allows an attacker who (1) has UserWrite permissions and (2) is using a…
2021-03-26
High
CVE-2020-7468
In FreeBSD 12.2-STABLE before r365772, 11.4-STABLE before r365773, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a ftpd(8) bug in the implementation of the file system s…
High
CVE-2021-28250
CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file. When a component is run as an argument of the runpicEhealth executable, the scri…
High
CVE-2021-28249
CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. To exploit the vulnerability, the ehealth user must create a malici…
High
CVE-2021-28246
CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a Dynamically Linked Shared Object Library. A regular user must create a malicious library in the writable RPAT…
2021-03-25
Critical
CVE-2021-27193
Incorrect default permissions vulnerability in the API of Netop Vision Pro up to and including 9.7.1 allows a remote unauthenticated attacker to read and write files on the remote machine with system…
High
CVE-2021-27192
Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients.
Medium
CVE-2021-1492
The Duo Authentication Proxy installer prior to 5.2.1 did not properly validate file installation paths. This allows an attacker with local user privileges to coerce the installer to write to arbitra…
2021-03-23
High
CVE-2020-7346
Privilege Escalation vulnerability in McAfee Data Loss Prevention (DLP) for Windows prior to 11.6.100 allows a local, low privileged, attacker through the use of junctions to cause the product to loa…
2021-03-22
High
CVE-2021-22314
There is a local privilege escalation vulnerability in some versions of ManageOne. A local authenticated attacker could perform specific operations to exploit this vulnerability. Successful exploitat…
2021-03-18
High
CVE-2020-26886
Softaculous before 5.5.7 is affected by a code execution vulnerability because of External Initialization of Trusted Variables or Data Stores. This leads to privilege escalation on the local host.
High
CVE-2021-22665
Rockwell Automation DriveTools SP v5.13 and below and Drives AOP v4.12 and below both contain a vulnerability that a local attacker with limited privileges may be able to exploit resulting in privile…
Medium
CVE-2021-24129
Unvalidated input and lack of output encoding in the Themify Portfolio Post WordPress plugin, versions before 1.1.6, lead to Stored Cross-Site Scripting (XSS) vulnerabilities allowing low-privileged…
Medium
CVE-2021-24127
Unvalidated input and lack of output encoding in the ThirstyAffiliates Affiliate Link Manager WordPress plugin, versions before 3.9.3, was vulnerable to authenticated Stored Cross-Site Scripting (XSS…
Medium
CVE-2021-24126
Unvalidated input and lack of output encoding in the Envira Gallery Lite WordPress plugin, versions before 1.8.3.3, did not properly sanitise the images metadata (namely title) before outputting them…
2021-03-16
High
CVE-2021-3344
A privilege escalation flaw was found in OpenShift builder. During build time, credentials outside the build context are automatically mounted into the container image under construction. An OpenShif…
2021-03-15
High
CVE-2021-27893
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation in nonstandard conditions. ConnectSecure on Windows is affected.
High
CVE-2021-27892
SSH Tectia Client and Server before 6.4.19 on Windows allow local privilege escalation. ConnectSecure on Windows is affected.
2021-03-12
High
CVE-2021-21069
Adobe Creative Cloud Desktop Application version 5.3 (and earlier) is affected by a local privilege escalation vulnerability that could allow an attacker to call functions against the installer to pe…
2021-03-11
High
CVE-2021-27077
Windows Win32k Elevation of Privilege Vulnerability
High
CVE-2021-27070
Windows 10 Update Assistant Elevation of Privilege Vulnerability
High
CVE-2021-26901
Windows Event Tracing Elevation of Privilege Vulnerability
High
CVE-2021-26900
Windows Win32k Elevation of Privilege Vulnerability
High
CVE-2021-26899
Windows UPnP Device Host Elevation of Privilege Vulnerability
High
CVE-2021-26898
Windows Event Tracing Elevation of Privilege Vulnerability
High
CVE-2021-26891
Windows Container Execution Agent Elevation of Privilege Vulnerability
High
CVE-2021-26889
Windows Update Stack Elevation of Privilege Vulnerability
High
CVE-2021-26887
<p>An elevation of privilege vulnerability exists in Microsoft Windows when Folder redirection has been enabled via Group Policy. When folder redirection file server is co-located with Terminal serve…
High
CVE-2021-26885
Windows WalletService Elevation of Privilege Vulnerability
High
CVE-2021-26882
Remote Access API Elevation of Privilege Vulnerability
High
CVE-2021-26880
Storage Spaces Controller Elevation of Privilege Vulnerability
High
CVE-2021-26878
Windows Print Spooler Elevation of Privilege Vulnerability
High
CVE-2021-26875
Windows Win32k Elevation of Privilege Vulnerability
High
CVE-2021-26874
Windows Overlay Filter Elevation of Privilege Vulnerability
High
CVE-2021-26873
Windows User Profile Service Elevation of Privilege Vulnerability
High
CVE-2021-26872
Windows Event Tracing Elevation of Privilege Vulnerability
High
CVE-2021-26871
Windows WalletService Elevation of Privilege Vulnerability
High
CVE-2021-26870
Windows Projected File System Elevation of Privilege Vulnerability
High
CVE-2021-26868
Windows Graphics Component Elevation of Privilege Vulnerability
High
CVE-2021-26866
Windows Update Service Elevation of Privilege Vulnerability
High
CVE-2021-26865
Windows Container Execution Agent Elevation of Privilege Vulnerability
High
CVE-2021-26864
Windows Virtual Registry Provider Elevation of Privilege Vulnerability
High
CVE-2021-26863
Windows Win32k Elevation of Privilege Vulnerability
High
CVE-2021-26862
Windows Installer Elevation of Privilege Vulnerability
High
CVE-2021-26860
Windows App-V Overlay Filter Elevation of Privilege Vulnerability
High
CVE-2021-24095
DirectX Elevation of Privilege Vulnerability
High
CVE-2021-24090
Windows Error Reporting Elevation of Privilege Vulnerability
High
CVE-2021-1729
Windows Update Stack Setup Elevation of Privilege Vulnerability
High
CVE-2021-1640
Windows Print Spooler Elevation of Privilege Vulnerability
Medium
CVE-2021-21363
swagger-codegen is an open-source project which contains a template-driven engine to generate documentation, API clients and server stubs in different languages by parsing your OpenAPI / Swagger defi…
2021-03-09
High
CVE-2021-21480
SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment). An attacker can intercept a request to the server, inject malicious JSP code in…
2021-03-08
High
CVE-2020-23967
Dr.Web Security Space versions 11 and 12 allow elevation of privilege for local users without administrative privileges to NT AUTHORITY\SYSTEM due to insufficient control during autoupdate.
2021-03-05
Critical
CVE-2020-29658
Zoho ManageEngine Application Control Plus before 100523 has an insecure SSL configuration setting for Nginx, leading to Privilege Escalation.
Critical
CVE-2021-27965
The MsIo64.sys driver before 1.1.19.1016 in MSI Dragon Center before 2.0.98.0 has a buffer overflow that allows privilege escalation via a crafted 0x80102040, 0x80102044, 0x80102050, or 0x80102054 IO…
2021-03-03
High
CVE-2020-13554
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation…
2021-02-27
High
CVE-2020-28243
An issue was discovered in SaltStack Salt before 3002.5. The minion's restartcheck is vulnerable to command injection via a crafted process name. This allows for a local privilege escalation by any u…
2021-02-26
High
CVE-2019-18945
Micro Focus Solutions Business Manager Application Repository versions prior to 11.7.1 are vulnerable to privilege escalation vulnerability.
2021-02-25
High
CVE-2021-25195
Windows PKU2U Elevation of Privilege Vulnerability
Medium
CVE-2021-24109
Microsoft Azure Kubernetes Service Elevation of Privilege Vulnerability
High
CVE-2021-24103
Windows Event Tracing Elevation of Privilege Vulnerability
High
CVE-2021-24102
Windows Event Tracing Elevation of Privilege Vulnerability
High
CVE-2021-24096
Windows Kernel Elevation of Privilege Vulnerability
High
CVE-2021-24092
Microsoft Defender Elevation of Privilege Vulnerability
High
CVE-2021-24087
Azure IoT CLI extension Elevation of Privilege Vulnerability
High
CVE-2021-1733
Sysinternals PsExec Elevation of Privilege Vulnerability
High
CVE-2021-1732
Windows Win32k Elevation of Privilege Vulnerability
High
CVE-2021-1728
System Center Operations Manager Elevation of Privilege Vulnerability
High
CVE-2021-1727
Windows Installer Elevation of Privilege Vulnerability
High
CVE-2021-1698
Windows Win32k Elevation of Privilege Vulnerability
2021-02-23
High
CVE-2021-20182
A privilege escalation flaw was found in openshift4/ose-docker-builder. The build container runs with high privileges using a chrooted environment instead of runc. If an attacker can gain access to t…
2021-02-19
High
CVE-2020-27997
An issue was discovered in SmartStoreNET before 4.1.0. Lack of Cross Site Request Forgery (CSRF) protection may lead to elevation of privileges (e.g., /admin/customer/create to create an admin accoun…
High
CVE-2020-13549
An exploitable local privilege elevation vulnerability exists in the file system permissions of Sytech XL Reporter v14.0.1 install directory. Depending on the vector chosen, an attacker can overwrite…
2021-02-18
Medium
CVE-2019-18243
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through the registry. This may allow privilege escalation.
Medium
CVE-2019-18255
HMI/SCADA iFIX (Versions 6.1 and prior) allows a local authenticated user to modify system-wide iFIX configurations through section objects. This may allow privilege escalation.
2021-02-17
High
CVE-2020-13555
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In COM Server Application Privilege Escalation, an attack…
High
CVE-2020-13553
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In webvrpcs Run Key Privilege Escalation in installation…
High
CVE-2020-13552
An exploitable local privilege elevation vulnerability exists in the file system permissions of Advantech WebAccess/SCADA 9.0.1 installation. In privilege escalation via multiple service executables…