CWE-250
2 CVEs of this weakness class.
Show as table
| Year published | CVEs | In CISA KEV |
|---|---|---|
| 2024 | 1 | 1 |
| 2025 | 1 | 1 |
Exploitation first, with newly exploited CVEs rising above old ones
- CVE-2025-40602MED 6.6KEVEPSS 3%
A local privilege escalation vulnerability due to insufficient authorization in the SonicWall SMA1000 appliance management console (AMC).
- CVE-2024-38813HIGH 7.5KEVEPSS 17%
The vCenter Server contains a privilege escalation vulnerability. A malicious actor with network access to vCenter Server may trigger this vulnerability to escalate privileges to root by sending a specially crafted network packet.