The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.
Volume of CVEs assigned to CWE-273 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
39 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-2921CRITICAL ktsuss versions 1.4 and prior has the uid set to root and does not drop privileges prior to executing user specified commands, which can result in command execution with root privi | Nov 19, 2019 | 9.8 | 88 | NO | YES |
CVE-2024-38813CRITICAL The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to r | Sep 17, 2024 | 9.8 | 77 | YES | NO |
CVE-2017-6972CRITICAL AlienVault USM and OSSIM before 5.3.7 and NfSen before 1.3.8 have an error in privilege dropping and unnecessarily execute the NfSen Perl code as root, aka AlienVault ID ENG-104945 | Mar 22, 2017 | 9.8 | 50 | NO | YES |
CVE-2026-60085HIGH PraisonAI before 4.6.78 contains an unenforced security policy vulnerability in the default Subprocess Sandbox backend where blocked_commands, blocked_paths, blocked_imports, allow | Jul 15, 2026 | 7.5 | 32 | NO | NO |
CVE-2026-0099HIGH In onNullBinding of HostEmulationManager.java, there is a possible way to launch an activity from the background due to a logic error in the code. This could lead to local escalati | Jun 1, 2026 | 7.8 | 32 | NO | NO |
CVE-2015-0278HIGH libuv before 0.10.34 does not properly drop group privileges, which allows context-dependent attackers to gain privileges via unspecified vectors. | May 18, 2015 | 10.0 | 32 | NO | NO |
CVE-2021-36372CRITICAL In Apache Ozone versions prior to 1.2.0, Initially generated block tokens are persisted to the metadata database and can be retrieved with authenticated users with permission to th | Nov 19, 2021 | 9.8 | 31 | NO | NO |
CVE-2020-24361CRITICAL SNMPTT before 1.4.2 allows attackers to execute shell code via EXEC, PREXEC, or unknown_trap_exec. | Aug 16, 2020 | 9.8 | 31 | NO | NO |
CVE-2011-3350CRITICAL masqmail 0.2.21 through 0.2.30 improperly calls seteuid() in src/log.c and src/masqmail.c that results in improper privilege dropping. | Nov 19, 2019 | 9.8 | 31 | NO | NO |
CVE-2012-1187CRITICAL Bitlbee does not drop extra group privileges correctly in unix.c | Oct 29, 2019 | 9.8 | 31 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.