CWE-303
3 CVEs of this weakness class.
Show as table
| Year published | CVEs | In CISA KEV |
|---|---|---|
| 2023 | 2 | 1 |
| 2024 | 0 | 0 |
| 2025 | 0 | 0 |
| 2026 | 1 | 0 |
Exploitation first, with newly exploited CVEs rising above old ones
- CVE-2023-29357CRIT 9.8KEVEPSS 100%
Microsoft SharePoint Server Elevation of Privilege Vulnerability
- CVE-2026-0073HIGH 8.8Real · low riskEPSS 1%
In adbd_tls_verify_cert of auth.cpp, there is a possible bypass of wireless ADB mutual authentication due to a logic error in the code. This could lead to remote (proximal/adjacent) code execution as the shell user with no additional execution privileges needed. User interaction is not needed for exploitation.
- CVE-2023-4641MED 4.7EPSS 0%
A flaw was found in shadow-utils. When asking for a new password, shadow-utils asks the password twice. If the password fails on the second attempt, shadow-utils fails in cleaning the buffer used to store the first entry. This may allow an attacker with enough access to retrieve the password from the memory.