CWE-1220.

Immich calendar heatmap endpoint discloses cross-user activity through broken access control

• immich
• Broken access control
• CWE-1220

Improper access control vulnerability

• Zohocorp ManageEngine Key Manager Plus
• CWE-1220

Improper access control vulnerability

• Zohocorp ManageEngine Key Manager Plus
• CWE-1220

Improper access control vulnerability

• Zohocorp ManageEngine Key Manager Plus
• CWE-1220

Gitea limited-visibility profile disclosure with public-only tokens

• Gitea
• CWE-1220

Asterisk: ARI setChannelVar bypasses live_dangerously and permits FILE() writes

• asterisk
• certified-asterisk
• Privilege escalation
• CWE-1220

Webform - Moderately critical - Access bypass - SA-CONTRIB-2026-167

• Drupal Webform
• CWE-1220

Cross-organization user modification and deletion via the SCIM API in Grafana Enterprise

• Grafana Enterprise
• Broken access control
• CWE-1220

Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching

• Apache Software Foundation Apache Camel
• CWE-1220

phpMyFAQ 4.2.0-alpha before 4.2.0-beta Missing Authorization via deleteGroup API

• thorsten phpMyFAQ
• CWE-1220

Credential Disclosure in P4 Search Configuration API

• Perforce P4 (Helix core)
• CWE-1220

Gitea private attachment disclosure through repository mismatch

• Gitea
• Broken access control
• CWE-1220

Windows Mobile Device Management Tampering Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1220

Windows Server Update Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1220

Windows Server Update Service Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1220

Windows StateRepository API Elevation of Privilege Vulnerability

• Microsoft Windows 11 Version 24H2
• Microsoft Windows 11 Version 25H2
• Broken access control
• CWE-1220

Azure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs

• Grafana Enterprise
• Grafana OSS
• Broken access control
• CWE-441

Insufficient Granularity of Access Control in GitLab

• GitLab
• CWE-1220

Ash field policies do not filter-nil forbidden calculations and aggregates, enabling an information-disclosure oracle

• CWE-1220

>=2.11.0-rc.0, <3.33.4 · fixed in 3.33.4

Incorrect privilege assignment in Temporary Elevated Access Management (TEAM) for AWS IAM Identity Center

• AWS iam-identity-center-team
• Privilege escalation
• CWE-1220

SQL Server Elevation of Privilege Vulnerability

• Microsoft SQL Server 2017 (CU 31)
• Microsoft SQL Server 2017 (GDR)
• CWE-1220

Microsoft SQL Server Elevation of Privilege Vulnerability

• Microsoft SQL Server 2017 (CU 31)
• Microsoft SQL Server 2017 (GDR)
• CWE-1220

Windows Connected User Experiences and Telemetry Information Disclosure Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• CWE-1220

AshLua eval read operations can read field-policy-protected fields via aggregates

• CWE-1220

>=0.1.0, <0.2.2 · fixed in 0.2.2

AshAi aggregate tool can read field-policy-protected fields

• CWE-1220

>=0.1.0, <1.0.3 · fixed in 1.0.3

HP Support Assistant – Potential Escalation of Privilege

• HP Inc. HP Support Assistant
• CWE-1220

docker-socket-proxy through 0.5.0 Insufficient Access Control Granularity Exposes Container Filesystems

• Tecnativa docker-socket-proxy
• CWE-1220

Control protections bypass in BeyondTrust Endpoint Privilege Management (Windows deployment) support utility

• BeyondTrust Endpoint Privilege Management (Windows deployment)
• CWE-1220

The Google Cloud Secret Manager secrets backend in Apache Airflow's Google provider never applied the team scope when resolving Connections and Variables: the caller's `team_name` was accepted by t...

• CWE-1220

<22.3.0 · fixed in 22.3.0

Windows User-Mode Power Service (UMPS) Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1220

Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX…: Insufficient granularity of access control in some subsystem for some Intel(R) Xeon(R) 6…

• Intel(R) Xeon(R) 6 Scalable processors with Intel(R) TDX may allow an information disclosure. Authorized adversary with an authenticated user combined with a high complexity attack may enable data exposure. This result may potentially occur via local access when attack requirements are present with special internal knowledge and requires no user interaction. The potential vulnerability may impact the confidentiality (none), integrity (none) and availability (none) of the vulnerable system, resulting in subsequent system confidentiality (high), integrity (none) and availability (none) impacts.
• CWE-1220

389-ds-base: 389-ds-base: heap-buffer-overflow in rdn_av_swap on quoted multivalued rdn

• Red Hat Directory Server 11
• Red Hat Directory Server 12
• CWE-1220

Keycloak-services: keycloak-services: incorrect authorization in admin role-composite deletion allows delegated admin to remove privileged child roles

• Red Hat build of Keycloak 26.6
• Red Hat build of Keycloak 26.6.7
• Broken access control
• CWE-1220

Keycloak-services: keycloak-services: realm default-group reads disclose hidden groups under fgap v2

• Red Hat build of Keycloak 26.6
• Red Hat build of Keycloak 26.6.7
• Information disclosure
• CWE-1220

Windows Event Logging Service Remote Code Execution Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1220

Windows Filtering Platform Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1220

Surface Broker SDMA Elevation of Privilege Vulnerability

• Microsoft Surface Go
• Microsoft Surface Hub
• CWE-1220

Active Directory Federation Services Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1607
• Microsoft Windows 10 Version 1809
• CWE-1220

Microsoft Exchange Server Elevation of Privilege Vulnerability

• Microsoft Exchange Server 2016 Cumulative Update 23
• Microsoft Exchange Server 2019 Cumulative Update 14
• CWE-1220

Windows StateRepository API Server file Elevation of Privilege Vulnerability

• Microsoft Windows 10 Version 1809
• Microsoft Windows 10 Version 21H2
• Broken access control
• CWE-1220

Keycloak-services: keycloak: fgap v2 parent group children endpoint bypasses per-child view permission filter

• Red Hat build of Keycloak 26.4
• Red Hat build of Keycloak 26.4.14
• CWE-1220

Keycloak-services: keycloak-services: keycloak: fgap v2 role groups endpoint discloses hidden group metadata without group view permission

• Red Hat build of Keycloak 26.6
• Red Hat build of Keycloak 26.6.6
• Broken access control
• CWE-1220

Keycloak: Information disclosure due to user profile permission bypass

• CWE-1220

<26.7.0 · fixed in 26.7.0

Insufficient granularity of access control in ASP (AMD Secure Processor) may allow an attacker with an untrusted user space application to map sensitive SMN (System Management Network) apertures lead…

• AMD Athlon™ 3000 Series Mobile Processors with Radeon™ Graphics
• AMD Ryzen™ Threadripper™ PRO 3000 WX-Series Processors
• CWE-1220

MLflow allows unauthorized access to multipart upload endpoints when the `--serve-artifacts` mode is enabled

• Broken access control
• CWE-1220

<3.10.0 · fixed in 3.10.0

Keycloak Account Resources user lookup contains broken access control

• CWE-1220

<26.4.12 || >=26.5.0, <26.6.2 · fixed in 26.4.12, 26.6.2

Improper isolation of shared resources within the CPU operation cache on Zen 2-based products could allow an attacker to corrupt instructions executed at a different privilege level, potentially resu…

• AMD EPYC™ 7002 Series Processors
• AMD Ryzen™ 4000 Series Mobile Processors with Radeon™ Graphics
• CWE-1189
• CWE-1220

Improper Input Validation in the AMD RAID driver could allow an attacker to point to an arbitrary memory location potentially resulting in privilege escalation and arbitrary code execution.

• AMD EPYC™ 4005 Series Processors
• AMD EPYC™ 4004 Series Processors
• CWE-1220

Microsoft Office Click-To-Run Elevation of Privilege Vulnerability

• Microsoft 365 Apps for Enterprise
• Microsoft Office 2019
• CWE-1220

Microsoft SharePoint Server Remote Code Execution Vulnerability

• Microsoft SharePoint Enterprise Server 2016
• Microsoft SharePoint Server 2019
• CWE-1220

Spring Cloud Config has an Authorization Bypass Through User-Controlled Key

• Broken access control
• CWE-1220

>=3.1.0, <=3.1.13 || >=4.1.0, <=4.1.9 || >=4.2.0, <=4.2.6 || >=4.3.0, <4.3.3 || >=5.0.0, <5.0.3 · fixed in 4.3.3, 5.0.3

Kata Container has CopyFile Policy Subversion via Symlinks

• CWE-61
• CWE-1220

<0.0.0-20260422180503-1b9e49eb2763 · fixed in 0.0.0-20260422180503-1b9e49eb2763

OpenClaw: Agent gateway config mutations could change protected operator settings

• Broken access control
• CWE-1220

<2026.4.20 · fixed in 2026.4.20

Apache Airflow's asset dependency graph did not restrict nodes by the viewer's DAG read permissions

• CWE-1220

<3.2.1rc1 · fixed in 3.2.1rc1

Apache Airflow's authenticated /ui/dags endpoint did not enforce per-DAG access control on embedded Human-in-the-Loop (HITL) and TaskInstance record

• CWE-1220

<3.2.1rc1 · fixed in 3.2.1rc1

CVE-2026-6356

• Augmentt
• CWE-1220

Paperclip: Cross-tenant agent API token minting via missing assertCompanyAccess on /api/agents/:id/keys

• Broken access control
• CWE-1220

<2026.416.0 · fixed in 2026.416.0

Argocd-image-updater: argocd image updater: cross-namespace privilege escalation via insufficient namespace validation

• Red Hat OpenShift GitOps
• CWE-1220

Microsoft Defender Elevation of Privilege Vulnerability

• Microsoft Defender Antimalware Platform
• CWE-1220

Insufficient granularity of access control for Remote Connector Servers in client mode

• Ping Identity PingIDM
• CWE-1220