CWE-273.

Dell PowerProtect Data Domain: Dell PowerProtect Data Domain, Feature Release versions 7.7.1.0 through 8.8…

• Dell PowerProtect Data Domain
• CWE-273

Multiple jail filesystem root escapes

• FreeBSD
• CWE-273
• CWE-281

Multiple jail filesystem root escapes

• FreeBSD
• CWE-273

Multiple jail filesystem root escapes

• FreeBSD
• CWE-273

PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

• CWE-273

<4.6.78 · fixed in 4.6.78

Hugging Face Transformers downloads custom generation code before trust consent

• Race condition
• CWE-273

>=4.49.0, <=5.8.1 · no fixed version yet

hwpmc fails to detach PMCs during exec credential transitions

• FreeBSD
• CWE-273

accountsservice: incomplete privilege drop when running Ubuntu-specific language helper scripts

• Canonical accountsservice
• CWE-273

ktrace(2) privilege incorrectly validated in jails

• FreeBSD
• CWE-273

unlinkat(2) ignores AT_RESOLVE_BENEATH flag

• FreeBSD
• CWE-273

sh _uid does not drop supplementary groups (incomplete privilege drop)

• CWE-273

<2.2.4 · fixed in 2.2.4

Duplicate Advisory: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend

• CWE-273

<=4.6.77 · no fixed version yet

id: groups= computed from real GID instead of effective GID

• Broken access control
• CWE-273

<0.6.0 · fixed in 0.6.0

seteuid failure ignored in auth modules

• Netatalk
• CWE-273

xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails

• neutrinolabs xrdp
• CWE-273

theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution

• Privilege escalation
• CWE-273

<0.2.0 · fixed in 0.2.0

Mastodon streaming API fails to disconnect disabled and suspended users

• mastodon
• CWE-273
• CWE-274

A vulnerability has been identified in SCALANCE LPE9403 (6GK5998-3GS00-2AC2) (All versions < V4.0).

• Siemens SCALANCE LPE9403
• CWE-273

HP Anyware Agent for Linux – Potential Authentication Bypass

• HP, Inc. HP Anyware Linux Agent
• CWE-273

Privilege escalation vulnerability

• VMware vCenter Server
• VMware Cloud Foundation
• Privilege escalation
• CWE-273

Mozilla Firefox: Internal browser event interfaces were exposed to web content when privileged…

• Mozilla Firefox
• Mozilla Firefox ESR
• CWE-273

Keycloak vulnerable to impersonation via logout token exchange

• Broken access control
• Authentication bypass

<22.0.10 || >=23.0.0, <24.0.3 · fixed in 22.0.10, 24.0.3

Mattermost Server Improper Access Control

• Broken access control
• CWE-273

<8.1.11 · fixed in 8.1.11

Ignite Realtime Openfire privilege escalation vulnerability

• Broken access control
• CWE-273

<4.8.1 · fixed in 4.8.1

netfilter: nft_ct: skip expectations for confirmed conntrack

• Linux kernel
• CWE-273

netfilter: nft_set_rbtree: skip sync GC for new elements in this transaction

• Linux kernel
• CWE-273

top-level shadow reference dropped too early for 64-bit PV guests

• Xen
• CWE-273

copy_file_range insufficient capability rights check

• FreeBSD
• CWE-273

In getLocationCache of GeoLocation.java, there is a possible way to send a mock location during an emergency call due to improper input validation.

• Google Android
• CWE-273

In ShortcutInfo of ShortcutInfo.java, there is a possible way for an app to retain notification listening access due to an uncaught exception.

• Google Android
• CWE-273

Play With Docker < 0.0.2 has an insecure CAP_SYS_ADMIN privileged mode causing the docker container to escape.

• CWE-273

A flaw was found in the QEMU virtio-fs shared file system daemon (virtiofsd) implementation.

• QEMU/virtiofsd
• CWE-273

Apache Superset allows authenticated users to access metadata they have no permission to

• CWE-273

<1.5.1 · fixed in 1.5.1

Moodle does not revoke role capabilities correctly

• CWE-264
• CWE-273

>=3.5.0, <3.5.9 || >=3.6.0, <3.6.7 || >=3.7.0, <3.7.3 · fixed in 3.5.9, 3.6.7, 3.7.3

gnome-shell: Linux distributions using CAP_SYS_NICE for gnome-shell may be exposed to a privilege…

• gnome-shell
• CWE-273

Improper Privilege Management in Apache Ozone

• CWE-273

<1.2.0 · fixed in 1.2.0

An issue was discovered in disable_priv_mode in shell.c in GNU Bash through 5.0 patch 11.

• CWE-273