Vulnerabilities > Improper Privilege Management

DATE CVE VULNERABILITY TITLE RISK
2021-04-02 CVE-2021-1802 Improper Privilege Management vulnerability in Apple mac OS X and Macos
A logic issue was addressed with improved state management.
local
low complexity
apple CWE-269
4.6
2021-04-02 CVE-2021-1787 Improper Privilege Management vulnerability in Apple products
Multiple issues were addressed with improved logic.
local
low complexity
apple CWE-269
4.6
2021-04-02 CVE-2021-1750 Improper Privilege Management vulnerability in Apple products
Multiple issues were addressed with improved logic.
network
apple CWE-269
critical
9.3
2021-04-02 CVE-2020-29620 Improper Privilege Management vulnerability in Apple mac OS X and Macos
This issue was addressed with improved entitlements.
network
apple CWE-269
6.8
2021-04-02 CVE-2020-27938 Improper Privilege Management vulnerability in Apple mac OS X
A logic issue was addressed with improved state management.
network
apple CWE-269
6.8
2021-03-26 CVE-2020-7467 Improper Privilege Management vulnerability in Freebsd
In FreeBSD 12.2-STABLE before r365767, 11.4-STABLE before r365769, 12.1-RELEASE before p10, 11.4-RELEASE before p4 and 11.3-RELEASE before p14 a number of AMD virtualization instructions operate on host physical addresses, are not subject to nested page table translation, and guest use of these instructions was not trapped.
local
low complexity
freebsd CWE-269
7.2
2021-03-26 CVE-2021-28250 Improper Privilege Management vulnerability in CA Ehealth Performance Manager
CA eHealth Performance Manager through 6.3.2.12 is affected by Privilege Escalation via a setuid (and/or setgid) file.
local
low complexity
ca CWE-269
7.8
2021-03-25 CVE-2021-27454 Improper Privilege Management vulnerability in GE Reason Dr60 Firmware
The software performs an operation at a privilege level higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses on the Reason DR60 (all firmware versions prior to 02A04.1).
local
low complexity
ge CWE-269
4.6
2021-03-25 CVE-2021-27448 Improper Privilege Management vulnerability in GE Mu320E Firmware
A miscommunication in the file system allows adversaries with access to the MU320E to escalate privileges on the MU320E (all firmware versions prior to v04A00.1).
local
low complexity
ge CWE-269
4.6
2021-03-25 CVE-2021-27192 Improper Privilege Management vulnerability in Netop Vision PRO
Local privilege escalation vulnerability in Windows clients of Netop Vision Pro up to and including 9.7.1 allows a local user to gain administrator privileges whilst using the clients.
local
low complexity
netop CWE-269
4.6