CWE-271 (特权放弃/降低错误) — Vulnerability Class 11

11 vulnerabilities classified as CWE-271 (特权放弃/降低错误). AI Chinese analysis included.

CVE ID	Title	CVSS	Severity	Published
CVE-2026-35535	Sudo 安全漏洞 — Sudo	7.4	High	2026-04-03
CVE-2026-25704	Incomplete privilege drop for com.system76.CosmicGreeter.GetUserData — cosmic-greeter	8.1^AI	High^AI	2026-03-30
CVE-2025-53819	Nix's privilege dropping to build user broke for macOS — nix	7.9	High	2025-07-14
CVE-2025-23395	Local root exploit via `logfile_reopen()` in screen 5.0.0 with setuid-root bit set	7.8	High	2025-05-26
CVE-2024-35179	Unprivileged Stalwart Mail Server user can read files as root — mail-server	6.8	Medium	2024-05-15
CVE-2024-0985	PostgreSQL non-owner REFRESH MATERIALIZED VIEW CONCURRENTLY executes arbitrary SQL — PostgreSQL	8.0	High	2024-02-08
CVE-2023-38496	Apptainer's ineffective privileges drop when requesting container network — apptainer	6.1	Medium	2023-07-25
CVE-2023-22648	Rancher Labs Rancher 安全漏洞 — Rancher	8.0	High	2023-06-01
CVE-2022-3569	Zimbra Collaboration Suite 安全漏洞 — Zimbra Collaboration Suite (ZCS)	7.8	-	2022-10-17
CVE-2020-35513	Linux Kernel NFS 安全漏洞 — kernel	4.9	-	2021-01-25
CVE-2019-11243	Google Kubernetes 信任管理问题漏洞 — Kubernetes	8.1	-	2019-04-22

Vulnerabilities classified as CWE-271 (特权放弃/降低错误) represent 11 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.