EUVD-2026-58220

Improper Privilege Management CWE-269 in Kibana Fleet can lead to privilege escalation via Privilege Escalation CAPEC-233. An integration policy may optionally declare extra data streams that the integration writes to, which Fleet adds to the Elasticsearch API key issued to Elastic Agents enrolle...

CVE-2026-72631

Kibana Fleet vulnerability CVE-2026-72631: Improper Privilege Management can allow an Elastic Agent API key issued to agents in a policy to gain additional write rights (insert new documents and extend index mappings) for certain indices by including extra data streams in the integration policy. ...

EUVD-2026-58227

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to gain elevated privileges due to improper privilege management...

Exploit for Improper Privilege Management in Google Chrome

CVE-2026-9999 — Chrome ANGLE/Metal WebGL PoC Hunting Harness...

PT-2026-71728

Name of the Vulnerable Software and Affected Versions IBM i versions 7.3 through 7.6 Description Improper privilege management in the HTTP Server may allow a local attacker to gain elevated privileges. Recommendations At the moment, there is no information about a newer version that contains a fi...

PT-2026-71808

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obtain unauthorized privileges due to improper privilege management...

PT-2026-71835

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypass security restrictions due to improper privilege management...

PT-2026-71847

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to obtain sensitive information or modify data due to improper privilege management...

Security Bulletin: IBM i is Affected By An Improper Management Vulnerability in HTTP Server [CVE-2026-18071]

Summary IBM i is vulnerable to elevated privileges due to improper privilege management CVE-2026-18071 in HTTP Server as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-18071 DESCRIPTION: IBM i could allow a local attacker to gain elevated privileges due to...

Security Bulletin: IBM i is Affected By Multiple Vulnerabilities in DRDA / DDM

Summary IBM i is vulnerable to multiple vulnerabilities CVE-2026-17216, CVE-2026-17076, CVE-2026-17077, CVE-2026-17074 in Distributed Relational Database Architecture DRDA / Distributed Data Management DDM as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-172...

Security Bulletin: IBM i is Affected By An Improper Privilege Management Vulnerability in LDAP [CVE-2026-17438]

Summary IBM i is vulnerable to obtaining sensitive information or modifying data due to improper privilege management CVE-2026-17438 in Lightweight Directory Access Protocol LDAP as described in the vulnerability details section. Vulnerability Details CVEID:CVE-2026-17438 DESCRIPTION: IBM i could...

EUVD-2026-57375

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands and obtain sensitive information due to improper privilege management...

CVE-2026-16904

CVE-2026-16904 (IBM i) affects IBM i 7.3–7.6. A remote authenticated attacker could execute arbitrary commands due to improper privilege management during monitor owner reassignment. CVSSv3.1 base score 8.1 (High): vectors include AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N; privileges required: LOW; net...

CVE-2026-16904 IBM i is Affected By improper privilege management in Navigator for i

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

EUVD-2026-57358

IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to execute arbitrary commands due to improper privilege management during monitor owner reassignment...

CVE-2026-68821

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

EUVD-2026-56469

Improper privilege management in Windows Package Manager allows an authorized attacker to elevate privileges locally...

PT-2026-70738

Name of the Vulnerable Software and Affected Versions Windows Package Manager affected versions not specified Description Improper privilege management allows an authorized attacker to elevate privileges locally. Recommendations At the moment, there is no information about a newer version that...

CVE-2026-19381

Kingston FURY CTRL RGB Control Software 2.0.65.0 is affected by a privilege management flaw in NTIOLib_KSFX.sys (Driver component). The vulnerability allows a local attacker to misuse an unknown function in the driver, with impact to confidentiality, integrity, and availability described as high....

The vulnerability in the Firefox web browser relates to the insecure management of privileges, allowing a perpetrator to trigger a service failure.

The vulnerability in the Firefox web browser is related to insecure management of privileges. Exploiting this vulnerability can allow a malicious actor to cause service interruptions...