Privilege escalation.

IM-Magic Partition Resizer Kernel Driver MDA_NTDRV.sys access control

• IM-Magic Partition Resizer
• Privilege escalation
• Broken access control

EaseUS Partition Master Kernel Driver EUEDKEPM.sys access control

• EaseUS Partition Master
• Privilege escalation
• Broken access control

EaseUS Partition Master Kernel Driver epmntdrv.sys access control

• EaseUS Partition Master
• Privilege escalation
• Broken access control

AOMEI Backupper Kernel Driver amwrtdrv.sys access control

• AOMEI Backupper
• Privilege escalation
• Broken access control

AOMEI Dynamic Disk Manager Kernel Driver ddmdrv.sys access control

• AOMEI Dynamic Disk Manager
• Privilege escalation
• Broken access control

AOMEI Partition Assistant Kernel Driver ampa10.sys access control

• AOMEI Partition Assistant
• Privilege escalation
• Broken access control

LiteLLM: M2M JWT Handler Has Improper Authorization

• Privilege escalation
• Broken access control

<=1.82.2 · no fixed version yet

LiteLLM: Admin Key Handler Has Improper Authorization

• Privilege escalation
• Broken access control

<=1.63.1 · no fixed version yet

Capgo - Scope Escalation via API Key Creation in /functions/v1/apikey

• Capgo
• Privilege escalation

Capgo - Improper 2FA Enforcement Logic via Team Security Settings

• Capgo
• Privilege escalation

Microsoft Azure Synapse Elevation of Privilege Vulnerability

• Microsoft Azure Synapse
• Privilege escalation

OpenClaw: Active Memory write scope could mutate global config

• Privilege escalation

<2026.5.6 · fixed in 2026.5.6

OpenClaw: Bootstrap token replay could widen pending pairing scopes

• Privilege escalation
• CWE-345

<2026.5.12 · fixed in 2026.5.12

OpenClaw: Shell positional parameters could weaken strict inline-eval checks

• Command injection
• Privilege escalation

<2026.4.2 · fixed in 2026.4.2

Daytona: Path traversal in sandbox volume id mounts arbitrary host paths into the sandbox — cross-tenant data access and host escape

• Path traversal
• Privilege escalation

<0.186.0 · fixed in 0.186.0

PraisonAI SandlockSandbox falls back to unrestricted subprocess execution when Landlock is unavailable

• Privilege escalation
• Information disclosure

>=4.5.110, <4.6.61 · fixed in 4.6.61

Strimzi: Unrestricted access to all Secrets within namespace watched by the Topic operator

• Privilege escalation
• CWE-272

<1.0.1 · fixed in 1.0.1

Strimzi: Cross-namespace privilege escalation via `Kafka.spec.entityOperator`

• Privilege escalation
• CWE-441

<1.0.1 · fixed in 1.0.1

Cifs-utils: local privilege escalation via forged cifs.spnego key description in cifs.upcall

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 8
• Privilege escalation

SourceCodester CET Automated Grading System with AI Predictive Analytics Student Self-Registration Endpoint index.php access control

• SourceCodester CET Automated Grading System with AI Predictive Analytics
• Privilege escalation
• Broken access control

Cisco Umbrella Virtual Appliance Privilege Escalation Vulnerability

• Cisco Umbrella Insights Virtual Appliance
• Privilege escalation

Broken Access Control in Azuriom CMS Server Routes Allows Account Takeover

• Azuriom CMS
• Privilege escalation
• Broken access control

WordPress Registration Form for WooCommerce plugin <= 1.0.9 - Privilege Escalation vulnerability

• ThemeGrill Registration Form for WooCommerce
• Privilege escalation

WordPress Falang multilanguage plugin <= 1.4.2 - Privilege Escalation vulnerability

• sbouey Falang multilanguage
• Privilege escalation

WordPress JetFormBuilder plugin <= 3.6.1 - Privilege Escalation vulnerability

• Jetmonsters JetFormBuilder
• Privilege escalation

WordPress LoginPress Pro plugin <= 6.2.2 - Privilege Escalation vulnerability

• LoginPress Pro
• Privilege escalation

WordPress MultiLoca plugin <= 4.2.15 - Privilege Escalation vulnerability

• Techspawn MultiLoca
• Privilege escalation

WordPress Support Ticket Management System plugin <= 1.9 - Privilege Escalation vulnerability

• Theme passion Support Ticket Management System
• Privilege escalation

WordPress Genemy theme <= 1.6.6 - Privilege Escalation vulnerability

• Jthemes Genemy
• Privilege escalation

WordPress Sonaar theme <= 4.27.4 - Privilege Escalation vulnerability

• Sonaar
• Privilege escalation

Contest Gallery <= 30.0.2 - Authenticated (Author+) Privilege Escalation via 'RegistryUserRole' Parameter

• contest-gallery Contest Gallery – Upload & Vote Photos, Media, Sell with PayPal & Stripe
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Android

• Google Android
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Improper privilege management in Google Chrome

• Google Chrome
• Privilege escalation

Duplicate Advisory: Bootstrap token replay could widen pending pairing scopes

• Privilege escalation

<=2026.5.10-beta.2 · no fixed version yet

Duplicate Advisory: Active Memory write scope could mutate global config

• Privilege escalation

<=2026.5.5 · no fixed version yet

WordPress Support Board plugin < 3.8.9 - Privilege Escalation vulnerability

• Schiocco Support Board
• Privilege escalation

Missing authentication in Oracle Corporation Oracle Outsourced Mfg for Discrete Industries

• Oracle Corporation Oracle Outsourced Mfg for Discrete Industries
• Privilege escalation
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Outsourced Mfg for Discrete Industries

• Oracle Corporation Oracle Outsourced Mfg for Discrete Industries
• Privilege escalation
• Authentication bypass

Improper privilege management in Oracle Corporation Oracle HR Intelligence

• Oracle Corporation Oracle HR Intelligence
• Privilege escalation

Missing authentication in Oracle Corporation Oracle Universal Work Queue

• Oracle Corporation Oracle Universal Work Queue
• Privilege escalation
• Broken access control

Improper access control in Oracle Corporation Oracle Universal Work Queue

• Oracle Corporation Oracle Universal Work Queue
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle Project Portfolio Analysis

• Oracle Corporation Oracle Project Portfolio Analysis
• Privilege escalation
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Project Portfolio Analysis

• Oracle Corporation Oracle Project Portfolio Analysis
• Privilege escalation
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Subledger Accounting

• Oracle Corporation Oracle Subledger Accounting
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle Subledger Accounting

• Oracle Corporation Oracle Subledger Accounting
• Privilege escalation
• Broken access control

Improper privilege management in Oracle Corporation Oracle HRMS (UK)

• Oracle Corporation Oracle HRMS (UK)
• Privilege escalation

Missing authentication in Oracle Corporation Oracle Quality

• Oracle Corporation Oracle Quality
• Privilege escalation
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Quality

• Oracle Corporation Oracle Quality
• Privilege escalation
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Process Manufacturing Process Planning

• Oracle Corporation Oracle Process Manufacturing Process Planning
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle Cost Management

• Oracle Corporation Oracle Cost Management
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle iSetup

• Oracle Corporation Oracle iSetup
• Privilege escalation
• Authentication bypass

Missing authentication in Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul

• Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul

• Oracle Corporation Oracle Complex Maintenance, Repair and Overhaul
• Privilege escalation
• Broken access control

Improper access control in Oracle Corporation Oracle Applications Manager

• Oracle Corporation Oracle Applications Manager
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle Cost Management

• Oracle Corporation Oracle Cost Management
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Oracle Spares Management

• Oracle Corporation Oracle Spares Management
• Privilege escalation
• Authentication bypass

Missing authentication in Oracle Corporation Oracle HR Intelligence

• Oracle Corporation Oracle HR Intelligence
• Privilege escalation
• Broken access control

Missing authentication in Oracle Corporation Siebel CRM Cloud Applications

• Oracle Corporation Siebel CRM Cloud Applications
• Privilege escalation
• Broken access control