CWE-1220
139 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 3 of them as exploited in the wild.
- 139Published CVEs139 of them scored
- 73Last 12 monthspublished in the last year
- 7Critical63 more rated high
- 3Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2026-56155
Active Directory Federation Services Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
ExploitedHigh7.8 - CVE-2026-33825
Microsoft Defender Elevation of Privilege Vulnerability
Microsoft · Microsoft Defender Antimalware Platform
ExploitedHigh7.8 - CVE-2025-31201
This issue was addressed by removing the vulnerable code. This issue is fixed in iOS 18.4.1 and iPadOS 18.4.1, macOS Sequoia 15.4.1, tvOS 18.4.1, visionOS…
Apple · iOS and iPadOS
ExploitedCritical9.8