Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

CWE-273 (对于放弃特权的检查不恰当) — Vulnerability Class 12

12 vulnerabilities classified as CWE-273 (对于放弃特权的检查不恰当). AI Chinese analysis included.

CVE IDTitleCVSSSeverityPublished
CVE-2026-32107 xrdp: Fail-open privilege drop in sesexec — child processes may execute as root if setuid fails — xrdp 8.8 High2026-04-17
CVE-2026-21882 theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution — theshit 8.4 High2026-03-02
CVE-2025-62175 Mastodon streaming API fails to disconnect disabled and suspended users — mastodon 4.3 Medium2025-10-13
CVE-2025-27396 Siemens SCALANCE LPE9403 安全漏洞 — SCALANCE LPE9403 8.8 High2025-03-11
CVE-2025-1003 HP Anyware Agent for Linux – Potential Authentication Bypass — HP Anyware Linux Agent 8.8 -2025-02-03
CVE-2023-0657 Keycloak: impersonation via logout token exchange 3.4 Low2024-11-17
CVE-2024-38813 Privilege escalation vulnerability — VMware vCenter Server 7.5 High2024-09-17
CVE-2023-5369 copy_file_range insufficient capability rights check — FreeBSD 9.6 -2023-10-04
CVE-2022-0358 QEMU 安全漏洞 — QEMU/virtiofsd 7.8 -2022-08-29
CVE-2021-37839 Improper access to dataset metadata information — Apache Superset 4.3 -2022-07-06
CVE-2021-3982 gnome-shell 安全漏洞 — gnome-shell 5.5 -2022-04-29
CVE-2021-36372 Original block tokens are persisted and can be retrieved — Apache Ozone 9.8 -2021-11-19

Vulnerabilities classified as CWE-273 (对于放弃特权的检查不恰当) represent 12 CVEs. The CWE taxonomy describes the weakness; review individual CVEs for product-specific impact.