CWE-273 Improper Check for Dropped Privileges
Description
The product attempts to drop privileges but does not check or incorrectly checks to see if the drop succeeded.
Associated Reviewed Advisories
Vulnerabilities classified under CWE-273 ordered by modification date.
| Advisory ID | NVD ID | Severity | PURLs | Summary | Last Modified |
|---|---|---|---|---|---|
| GHSA-5r6c-gj4g-r697 | CVE-2026-60085 | HIGH |
PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend |
2026-10-08 | |
| GHSA-65c8-r727-2mpj | - | HIGH |
Duplicate Advisory: PraisonAI: SecurityPolicy command/path/import restrictions are completely unenforced by the default SubprocessSandbox backend |
2026-10-08 | |
| GHSA-x9r9-c232-4q39 | CVE-2026-80047 | HIGH |
Hugging Face Transformers downloads custom generation code before trust consent |
2026-09-30 | |
| GHSA-q38v-wp89-2w55 | CVE-2026-54552 | HIGH |
sh _uid does not drop supplementary groups (incomplete privilege drop) |
2026-07-17 | |
| GHSA-47c7-qrm7-mqw7 | CVE-2026-35370 | MODERATE | - |
id: groups= computed from real GID instead of effective GID |
2026-07-06 |
| GHSA-2j3p-gqw5-g59j | CVE-2026-21882 | HIGH | - |
theshit's Improper Privilege Dropping Allows Local Privilege Escalation via Command Re-execution |
2026-03-02 |
| GHSA-5xvc-rwv8-86p7 | CVE-2024-25420 | HIGH |
Ignite Realtime Openfire privilege escalation vulnerability |
2025-11-15 | |
| GHSA-xp9j-8p68-9q93 | CVE-2024-21848 | LOW |
Mattermost Server Improper Access Control |
2024-12-13 | |
| GHSA-7fpj-9hr8-28vh | CVE-2023-0657 | LOW |
Keycloak vulnerable to impersonation via logout token exchange |
2024-11-18 | |
| GHSA-86fh-j58m-7pf5 | CVE-2021-36372 | CRITICAL |
Improper Privilege Management in Apache Ozone |
2024-01-31 | |
| GHSA-748r-5r8q-273m | CVE-2021-37839 | MODERATE |
Apache Superset allows authenticated users to access metadata they have no permission to |
2023-09-05 | |
| GHSA-g9m2-c2x5-fr2v | CVE-2019-14879 | MODERATE | - |
Moodle does not revoke role capabilities correctly |
2023-08-01 |