# privilege_escalation


- [CVE-2024-57726](https://insights.sbomify.com/CVE-2024-57726/): SimpleHelp Missing Authorization (critical 9.9, exploited in the wild)
- [CVE-2023-29357](https://insights.sbomify.com/CVE-2023-29357/): Microsoft SharePoint Server Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2023-23397](https://insights.sbomify.com/CVE-2023-23397/): Microsoft Office Outlook Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2021-20021](https://insights.sbomify.com/CVE-2021-20021/): SonicWall Email Security Improper Privilege Management (critical 9.8, exploited in the wild)
- [CVE-2018-19323](https://insights.sbomify.com/CVE-2018-19323/): GIGABYTE Multiple Products Privilege Escalation (critical 9.8, exploited in the wild)
- [CVE-2010-0840](https://insights.sbomify.com/CVE-2010-0840/): Oracle JRE Unspecified (critical 9.8, exploited in the wild)
- [CVE-2025-32463](https://insights.sbomify.com/CVE-2025-32463/): Sudo Inclusion of Functionality from Untrusted Control Sphere (critical 9.3, exploited in the wild)
- [CVE-2026-86060](https://insights.sbomify.com/CVE-2026-86060/): MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command (critical 9.2, exploited in the wild)
- [CVE-2021-34523](https://insights.sbomify.com/CVE-2021-34523/): Microsoft Exchange Server Privilege Escalation (critical 9.0, exploited in the wild)
- [CVE-2026-58704](https://insights.sbomify.com/CVE-2026-58704/): Google Pixel Improper Authorization (high 8.8, exploited in the wild)
- [CVE-2025-33073](https://insights.sbomify.com/CVE-2025-33073/): Microsoft Windows SMB Client Improper Access Control (high 8.8, exploited in the wild)
- [CVE-2024-49039](https://insights.sbomify.com/CVE-2024-49039/): Microsoft Windows Task Scheduler Privilege Escalation (high 8.8, exploited in the wild)

---
From sbomify Insights: https://insights.sbomify.com/types/privilege-escalation/