CWE-271.

Kahi has privilege-drop and socket/log permission issues

• Broken access control
• CWE-271

<0.1.0-alpha.9 · fixed in 0.1.0-alpha.9

CloudNativePG's metrics exporter allows privilege escalation to PostgreSQL superuser and OS RCE

• Privilege escalation
• CWE-271

<1.28.3 || >=1.29.0, <1.29.1 · fixed in 1.28.3, 1.29.1

Sudo: In Sudo through 1.9.17p2 before 3e474c2, a failure of a setuid, setgid…

• Sudo
• CWE-271
• CWE-272

Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData

• pop-os cosmic-greeter
• Race condition
• CWE-271

Rancher's Azure AD permission changes are not reflected on active sessions

• Privilege escalation
• Authentication bypass

>=2.6.7, <2.6.13 || >=2.7.0, <2.7.4 · fixed in 2.6.13, 2.7.4

Nix's privilege dropping to build user broke for macOS

• nix
• CWE-271

Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set

• CWE-271

Kubernetes did not effectively clear service account credentials in k8s.io/kubernetes

• CWE-271

>=1.12.0, <1.12.5 || >=1.13.0, <1.13.1 · fixed in 1.12.5, 1.13.1

Unprivileged Stalwart Mail Server user can read files as root

• stalwartlabs mail-server
• CWE-271

PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL

• PostgreSQL
• CWE-271

Ineffective privileges drop when requesting container network

• Privilege escalation
• CWE-271

>=1.2.0, <1.2.1 · fixed in 1.2.1

Synacor Zimbra Collaboration Suite (ZCS): Due to an issue with incorrect sudo permissions…

• Synacor Zimbra Collaboration Suite (ZCS)
• CWE-271

kernel: A flaw incorrect umask during file or directory modification in the Linux kernel NFS…

• kernel
• CWE-271