Vulnerabilities (CVE)

Filtered by CWE-269
Total 3865 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-42106 2 Microsoft, Trendmicro 4 Windows, Apex One, Worry-free Business Security and 1 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42105 and 42107.
CVE-2021-42105 2 Microsoft, Trendmicro 4 Windows, Apex One, Worry-free Business Security and 1 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42104, 42106 and 42107.
CVE-2021-42104 2 Microsoft, Trendmicro 4 Windows, Apex One, Worry-free Business Security and 1 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Unnecessary privilege vulnerabilities in Trend Micro Apex One, Apex One as a Service, Worry-Free Business Security 10.0 SP1 and Worry-Free Business Security Services could allow a local attacker to escalate privileges on affected installations. Please note: an attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. This vulnerability is similar to but not identical to CVE-2021-42105, 42106 and 42107.
CVE-2021-42082 1 Osnexus 1 Quantastor 2026-06-17 N/A 7.8 HIGH
Local users are able to execute scripts under root privileges. POC On the local host run the following command: curl 'localhost:8154/qstor/qs_upgrade.py?taskId=1&a=;`whoami`'
CVE-2021-41388 2 Apple, Netskope 2 Macos, Netskope 2026-06-17 7.2 HIGH 7.8 HIGH
Netskope client prior to 89.x on macOS is impacted by a local privilege escalation vulnerability. The XPC implementation of nsAuxiliarySvc process does not perform validation on new connections before accepting the connection. Thus any low privileged user can connect and call external methods defined in XPC service as root, elevating their privilege to the highest level.
CVE-2021-41348 1 Microsoft 1 Exchange Server 2026-06-17 5.2 MEDIUM 8.0 HIGH
Microsoft Exchange Server Elevation of Privilege Vulnerability
CVE-2021-41347 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows AppX Deployment Service Elevation of Privilege Vulnerability
CVE-2021-41345 1 Microsoft 8 Windows 10, Windows 11, Windows 8.1 and 5 more 2026-06-17 7.2 HIGH 7.8 HIGH
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-41339 1 Microsoft 4 Windows 10, Windows 11, Windows Server 2016 and 1 more 2026-06-17 4.6 MEDIUM 4.7 MEDIUM
Microsoft DWM Core Library Elevation of Privilege Vulnerability
CVE-2021-41335 1 Microsoft 8 Windows 10, Windows 7, Windows 8.1 and 5 more 2026-06-17 7.2 HIGH 7.8 HIGH
Windows Kernel Elevation of Privilege Vulnerability
CVE-2021-41334 1 Microsoft 4 Windows 10, Windows 11, Windows Server 2016 and 1 more 2026-06-17 4.6 MEDIUM 7.0 HIGH
Windows Desktop Bridge Elevation of Privilege Vulnerability
CVE-2021-41022 2 Fortinet, Microsoft 2 Fortisiem, Windows 2026-06-17 4.6 MEDIUM 7.8 HIGH
A improper privilege management in Fortinet FortiSIEM Windows Agent version 4.1.4 and below allows attacker to execute privileged code or commands via powershell scripts
CVE-2021-40854 1 Anydesk 1 Anydesk 2026-06-17 4.6 MEDIUM 7.8 HIGH
AnyDesk before 6.2.6 and 6.3.x before 6.3.3 allows a local user to obtain administrator privileges by using the Open Chat Log feature to launch a privileged Notepad process that can launch other applications.
CVE-2021-40489 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 7.2 HIGH 7.8 HIGH
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40488 1 Microsoft 8 Windows 10, Windows 11, Windows 8.1 and 5 more 2026-06-17 7.2 HIGH 7.8 HIGH
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40478 1 Microsoft 8 Windows 10, Windows 11, Windows 8.1 and 5 more 2026-06-17 7.2 HIGH 7.8 HIGH
Storage Spaces Controller Elevation of Privilege Vulnerability
CVE-2021-40477 1 Microsoft 8 Windows 10, Windows 11, Windows 8.1 and 5 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows Event Tracing Elevation of Privilege Vulnerability
CVE-2021-40470 1 Microsoft 5 Windows 10, Windows 11, Windows Server 2016 and 2 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
DirectX Graphics Kernel Elevation of Privilege Vulnerability
CVE-2021-40467 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability
CVE-2021-40466 1 Microsoft 10 Windows 10, Windows 11, Windows 7 and 7 more 2026-06-17 4.6 MEDIUM 7.8 HIGH
Windows Common Log File System Driver Elevation of Privilege Vulnerability