CWE-267Privilege Defined With Unsafe Actions

Abstraction: Base · CVEs in our corpus: 66

A particular privilege, role, capability, or right can be used to perform unsafe actions that were not intended, even when it is assigned to the correct entity.

Last updated: 20 August 2026 13:14 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 7 mapping(s) from 4 framework(s): STIG ubuntu 22 04 3 (partial) · ATT&CK 2 (partial) · CAPEC 1 (partial) · STIG oracle linux 9 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.AA-05
AC-5 Separation of Duties
AC-6 Least Privilege
AC-3 Access Enforcement

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

10 hardening rules · 4 OS baselines

Validate

Prove the fix (OWASP ASVS)

V13.2.2
V3.7.3
V9.2.2
V9.2.3

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

MITRE ATT&CK techniques this weakness enables

Our own two-way CWE↔ATT&CK cross-walk — a direct mapping with no public source (the CWE→CAPEC→ATT&CK chain leaves most top weaknesses, incl. XSS and SQLi, mapped to nothing).

Direction: ← other covers this; → this covers other (F/M/P = full / mostly / partial). gov = governs / implements (a mandate, not coverage).

T1123 Audio Capture←P →P T1125 Video Capture←P →P

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2025-41244` KEV	8.5	7.8	0.0788	2025-09-29
`CVE-2026-29646`	7.2	9.8	0.0037	2026-04-20
`CVE-2020-29396`	7.1	8.8	0.0324	2020-12-22
`CVE-2023-22647`	7.1	9.9	0.0072	2023-06-01
`CVE-2021-32739`	6.8	8.8	0.0114	2021-07-15
`CVE-2023-2983`	6.7	8.8	0.0092	2023-05-30
`CVE-2024-55968`	6.7	8.8	0.0100	2025-01-28
`CVE-2025-23015`	6.7	8.8	0.0098	2025-02-04
`CVE-2025-26467`	6.6	8.8	0.0050	2025-08-25
`CVE-2021-44547`	6.5	9.1	0.0069	2023-04-25
`CVE-2025-14349`	6.5	8.8	0.0036	2026-02-13
`CVE-2023-44218`	6.4	8.8	0.0020	2023-10-03
`CVE-2024-39866`	6.4	8.8	0.0024	2024-07-09
`CVE-2026-23526`	6.4	8.8	0.0026	2026-01-21
`CVE-2026-0945`	6.4	8.8	0.0022	2026-02-04
`CVE-2026-27314`	6.4	8.8	0.0026	2026-04-07
`CVE-2021-23166`	6.3	8.7	0.0065	2023-04-25
`CVE-2021-23186`	6.3	8.7	0.0064	2023-04-25
`CVE-2023-43746`	6.2	8.7	0.0043	2023-10-10
`CVE-2026-10090`	6.2	9.0	0.0025	2026-08-05
`CVE-2024-42365`	6.1	7.4	0.0470	2024-08-08
`CVE-2026-2459`	6.0	8.1	0.0033	2026-02-24
`CVE-2026-2460`	6.0	8.1	0.0028	2026-02-24
`CVE-2026-42406`	6.0	8.7	0.0015	2026-05-13
`CVE-2026-9560`	5.9	7.8	0.0057	2026-05-26