← All weakness types
Incorrect Authorization
CWE-8633,114 vulnerabilities are classified as Incorrect Authorization (CWE-863). The most exploitable are shown first (by EPSS), each with its CVSS score, exploit-prediction, CISA KEV status, and available fix.
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2023-22518 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2023-38035 | Critical | 9.8 | 100% | KEV + Ransom | - |
| CVE-2022-46169 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2025-29927 | Critical | 9.1 | 100% | - | Fix |
| CVE-2024-38856 | Critical | 9.8 | 99% | KEV | Fix |
| CVE-2020-36289 | Medium | 5.3 | 99% | - | Fix |
| CVE-2022-0824 | High | 8.8 | 97% | - | Fix |
| CVE-2024-45216 | Critical | 9.8 | 91% | - | Fix |
| CVE-2025-54253 | Critical | 10.0 | 90% | KEV | - |
| CVE-2019-7192 | Critical | 9.8 | 88% | KEV + Ransom | Fix |
| CVE-2021-40655 | High | 7.5 | 87% | KEV | - |
| CVE-2024-6782 | Critical | 9.8 | 83% | - | Fix |
| CVE-2018-13382 | Critical | 9.1 | 82% | KEV + Ransom | Fix |
| CVE-2021-36749 | Medium | 6.5 | 81% | - | Fix |
| CVE-2020-13957 | Critical | 9.8 | 79% | - | - |
| CVE-2023-24880 | Medium | 4.4 | 78% | KEV + Ransom | Fix |
| CVE-2021-24917 | High | 7.5 | 72% | - | Fix |
| CVE-2023-22480 | High | 7.3 | 67% | - | Fix |
| CVE-2023-35166 | Critical | 9.9 | 63% | - | Fix |
| CVE-2019-7304 | Critical | 9.8 | 61% | - | Fix |
| CVE-2021-3577 | High | 8.8 | 60% | - | Fix |
| CVE-2010-2965 | Critical | 9.8 | 58% | - | - |
| CVE-2021-45466 | Critical | 9.8 | 55% | - | Fix |
| CVE-2019-3403 | Medium | 5.3 | 53% | - | Fix |
| CVE-2023-34051 | Critical | 9.8 | 45% | - | - |
| CVE-2021-3493 | High | 8.8 | 44% | KEV | Fix |
| CVE-2023-26258 | Critical | 9.8 | 38% | - | - |
| CVE-2022-0482 | Critical | 9.1 | 38% | - | Fix |
| CVE-2018-13109 | High | 7.5 | 36% | - | - |
| CVE-2021-43858 | High | 8.8 | 35% | - | Fix |
| CVE-2021-41805 | High | 8.8 | 35% | - | Fix |
| CVE-2024-24824 | High | 8.8 | 34% | - | Fix |
| CVE-2013-2574 | High | 7.5 | 30% | - | - |
| CVE-2018-14665 | Medium | 6.6 | 27% | - | Fix |
| CVE-2026-35029 | High | 8.8 | 26% | - | Fix |
| CVE-2022-39214 | Critical | 9.6 | 26% | - | Fix |
| CVE-2022-32532 | Critical | 9.8 | 25% | - | Fix |
| CVE-2020-35948 | Critical | 9.9 | 25% | - | Fix |
| CVE-2020-12503 | High | 7.2 | 23% | - | - |
| CVE-2021-39341 | High | 8.2 | 23% | - | - |
| CVE-2018-13324 | Critical | 9.8 | 23% | - | - |
| CVE-2022-47874 | Medium | 6.5 | 23% | - | - |
| CVE-2021-3560 | High | 7.8 | 22% | KEV | Fix |
| CVE-2014-8109 | Medium | 4.3 | 22% | - | Fix |
| CVE-2023-20269 | Medium | 5.0 | 22% | KEV + Ransom | - |
| CVE-2021-27177 | Critical | 9.8 | 20% | - | - |
| CVE-2019-7258 | High | 8.8 | 20% | - | - |
| CVE-2023-44860 | High | 7.5 | 20% | - | - |
| CVE-2019-19597 | High | 8.8 | 19% | - | - |
| CVE-2022-1401 | Medium | 6.9 | 18% | - | Fix |
| CVE-2019-5533 | Medium | 4.3 | 18% | - | Fix |
| CVE-2019-8446 | Medium | 5.3 | 18% | - | Fix |
| CVE-2019-1912 | Critical | 9.1 | 17% | - | Fix |
| CVE-2021-30533 | Medium | 6.5 | 17% | KEV | Fix |
| CVE-2022-34046 | High | 7.5 | 17% | - | - |
| CVE-2024-41110 | Critical | 9.9 | 16% | - | Fix |
| CVE-2020-14321 | High | 8.8 | 16% | - | Fix |
| CVE-2025-24434 | Critical | 9.1 | 16% | - | - |
| CVE-2023-20048 | Critical | 9.9 | 16% | - | - |
| CVE-2023-2640 | High | 7.8 | 16% | - | Fix |
| CVE-2021-30538 | Medium | 4.3 | 16% | - | Fix |
| CVE-2023-29708 | High | 7.5 | 15% | - | - |
| CVE-2007-2586 | High | 9.3 | 14% | - | - |
| CVE-2023-32749 | High | 8.8 | 14% | - | Fix |
| CVE-2021-21389 | High | 8.1 | 14% | - | Fix |
| CVE-2019-12419 | Critical | 9.8 | 14% | - | Fix |
| CVE-2020-17049 | Medium | 6.6 | 14% | - | Fix |
| CVE-2022-33174 | Critical | 9.8 | 13% | - | Fix |
| CVE-2019-3401 | Medium | 5.3 | 13% | - | Fix |
| CVE-2025-43561 | Critical | 9.1 | 13% | - | - |
| CVE-2018-15767 | High | 8.8 | 12% | - | Fix |
| CVE-2023-21715 | High | 7.3 | 12% | KEV | - |
| CVE-2021-3337 | High | 7.5 | 11% | - | - |
| CVE-2019-14813 | Critical | 9.8 | 11% | - | Fix |
| CVE-2021-24405 | Medium | 6.5 | 11% | - | - |
| CVE-2025-13184 | Critical | 9.8 | 11% | - | - |
| CVE-2023-24932 | Medium | 6.7 | 11% | - | Fix |
| CVE-2018-1057 | High | 8.8 | 10% | - | Fix |
| CVE-2022-22978 | Critical | 9.8 | 10% | - | Fix |
| CVE-2021-42192 | High | 8.8 | 9.9% | - | - |
| CVE-2025-43565 | High | 8.4 | 9.5% | - | - |
| CVE-2025-43564 | Critical | 9.1 | 9.3% | - | - |
| CVE-2013-4985 | High | 7.5 | 9.0% | - | - |
| CVE-2020-36287 | Medium | 5.3 | 9.0% | - | Fix |
| CVE-2023-32629 | High | 7.8 | 8.9% | - | Fix |
| CVE-2022-1631 | High | 8.8 | 8.8% | - | Fix |
| CVE-2023-5009 | High | 8.2 | 8.3% | - | Fix |
| CVE-2016-6797 | High | 7.5 | 8.1% | - | Fix |
| CVE-2018-15640 | High | 8.8 | 7.9% | - | - |
| CVE-2025-49825 | Critical | 9.8 | 7.8% | - | - |
| CVE-2026-32267 | Critical | 9.8 | 7.7% | - | Fix |
| CVE-2018-18955 | High | 7.0 | 7.6% | - | Fix |
| CVE-2026-47929 | High | 8.4 | 7.5% | - | - |
| CVE-2021-24278 | High | 7.5 | 7.4% | - | Fix |
| CVE-2020-35682 | High | 8.8 | 7.2% | - | Fix |
| CVE-2021-21276 | Critical | 9.3 | 7.2% | - | Fix |
| CVE-2022-21894 | Medium | 4.4 | 6.6% | - | Fix |
| CVE-2021-30638 | High | 7.5 | 6.6% | - | Fix |
| CVE-2022-47002 | Critical | 9.8 | 6.3% | - | Fix |
| CVE-2019-0678 | Medium | 6.8 | 6.1% | - | - |
Showing the top 100 of 3,114. Browse all 3,114 in the lookup tool.