CWE-264
01
vulnerabilities (8955)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-26169US | —OT critical | KEV | ||
Windows Error Reporting Service Elevation of Privilege Vulnerability | ||||
| CVE-2024-21338US | —OT critical | KEV | ||
Windows Kernel Elevation of Privilege Vulnerability | ||||
| CVE-2023-43208US | critical9.8OT critical | KEV | ||
NextGen Healthcare Mirth Connect before version 4.4.1 is vulnerable to unauthenticated remote code execution. Note that this vulnerability is caused by the incomplete patch of CVE-… | ||||
| CVE-2023-29357US | —OT critical | KEV | ||
Microsoft SharePoint Server Elevation of Privilege Vulnerability | ||||
| CVE-2023-20963US | high7.8OT critical | KEV | ||
In WorkSource, there is a possible parcel mismatch. This could lead to local escalation of privilege with no additional execution privileges needed. User interaction is not needed… | ||||
| CVE-2022-41080US | —OT critical | KEV | ||
Microsoft Exchange Server Elevation of Privilege Vulnerability | ||||
| CVE-2022-38028US | —OT critical | KEV | ||
Windows Print Spooler Elevation of Privilege Vulnerability | ||||
| CVE-2022-22047US | high7.2OT critical | KEV | ||
Windows Client Server Run-time Subsystem (CSRSS) Elevation of Privilege Vulnerability | ||||
| CVE-2022-26904US | medium4.4OT critical | KEV | ||
Windows User Profile Service Elevation of Privilege Vulnerability | ||||
| CVE-2022-24521US | medium4.6OT critical | KEV | ||
Windows Common Log File System Driver Elevation of Privilege Vulnerability | ||||
| CVE-2022-22948US | medium6.5OT critical | KEV | ||
The vCenter Server contains an information disclosure vulnerability due to improper permission of files. A malicious actor with non-administrative access to the vCenter Server may… | ||||
| CVE-2022-26501US | critical9.8OT critical | KEV | ||
Veeam Backup & Replication 10.x and 11.x has Incorrect Access Control (issue 1 of 2). | ||||
| CVE-2022-26500US | high8.8OT critical | KEV | ||
Improper limitation of path names in Veeam Backup & Replication 9.5U3, 9.5U4,10.x, and 11.x allows remote authenticated users access to internal API functions that allows attackers… | ||||
| CVE-2022-22706US | high7.8OT critical | KEV | ||
Arm Mali GPU Kernel Driver allows a non-privileged user to achieve write access to read-only memory pages. This affects Midgard r26p0 through r31p0, Bifrost r0p0 through r35p0, and… | ||||
| CVE-2021-43890US | high7.1OT critical | KEV | ||
We have investigated reports of a spoofing vulnerability in AppX installer that affects Microsoft Windows. Microsoft is aware of attacks that attempt to exploit this vulnerability… | ||||
| CVE-2021-41357US | medium4.6OT critical | KEV | ||
Win32k Elevation of Privilege Vulnerability | ||||
| CVE-2021-40450US | medium4.6OT critical | KEV | ||
Win32k Elevation of Privilege Vulnerability | ||||
| CVE-2021-38649US | medium4.6OT critical | KEV | ||
Open Management Infrastructure Elevation of Privilege Vulnerability | ||||
| CVE-2021-38648US | medium4.6OT critical | KEV | ||
Open Management Infrastructure Elevation of Privilege Vulnerability | ||||
| CVE-2021-38645US | medium4.6OT critical | KEV | ||
Open Management Infrastructure Elevation of Privilege Vulnerability | ||||
02
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan