CWE-270Base1 in KEV

Privilege Context Switching Error

Draft in the CWE catalog · 27 CVEs mapped

27
CVEs mapped
1
In KEV
7.8
Median CVSS
What it is

The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.

Recent examples
8.8cvss
CVE-2026-88200

CVE-2026-88200 - HIGH Severity Vulnerability

Privilege context switching error in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

HIGHno explanation yet
1%
epss
9.4cvss
CVE-2026-9560

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated…

Privilege escalation via background service of OpenVPN Connect 3.5.1 through 3.8.1 on macOS allows attackers to execute arbitrary commands with elevated privileges via local IPC channel

CRITICALno explanation yet
0%
epss
7.7cvss
CVE-2026-34853

Permission bypass vulnerability in the LBS module

Permission bypass vulnerability in the LBS module. Impact: Successful exploitation of this vulnerability may affect availability.

HIGHno explanation yet
0%
epss
The record
Technical detail
CWE ID
CWE-270
Abstraction
Base
Structure
Simple
Status
Draft
References (2)
https://www.microsoftpressstore.com/store/writing-secure-code-9780735617223https://web.archive.org/web/20211209014121/https://www.cisa.gov/uscert/bsi/articles/knowledge/principles/least-privilege