CWE-270Privilege Context Switching Error

Abstraction: Base · CVEs in our corpus: 26

The product does not properly manage privileges while it is switching between different contexts that have different privileges or spheres of control.

Last updated: 21 August 2026 14:15 UTC

Cumulative inbound coverage

How completely the frameworks we cross-walk collectively cover this — the verdict is the strongest single mapping (overlapping partials are not summed); breadth shows the corroboration behind it.

Collective: partial · 2 mapping(s) from 2 framework(s): CAPEC 1 (partial) · STIG ubuntu 22 04 1 (partial)

See the full cumulative-coverage rollup →

Control responseHuman-reviewed

Answering this weakness across the control lifecycle, from our framework cross-walks.

Prevent

Stop it (NIST 800-53 / CSF Protect)

PR.AA-05
PR.PS-06
AC-24 Access Control Decisions
AC-3 Access Enforcement

Detect

Catch it (CSF Detect / Respond)

—

Harden

Shrink the surface (DISA STIG)

2 hardening rules · 2 OS baselines

Validate

Prove the fix (OWASP ASVS)

V13.2.2

NIST 800-53 r5 controls that address this weakness (0)AI-assisted

Control	Title	Family	Why it addresses this CWE
No NIST controls proposed yet.

Top CVEs of this weakness type, ranked by Risk Priority

CVE	Risk	CVSS	EPSS	Published
`CVE-2023-26475`	9.3	9.9	0.6359	2023-03-02
`CVE-2021-3493` KEV	8.8	8.8	0.4917	2021-04-17
`CVE-2023-25754`	7.7	9.8	0.0228	2023-05-08
`CVE-2023-37912`	7.2	9.9	0.0125	2023-10-25
`CVE-2019-14819`	6.8	8.8	0.0105	2020-01-07
`CVE-2025-49581`	6.6	8.8	0.0051	2025-06-13
`CVE-2024-11263`	6.3	9.3	0.0016	2024-11-15
`CVE-2026-9560`	5.9	7.8	0.0057	2026-05-26
`CVE-2017-2663`	5.8	8.2	0.0037	2018-07-27
`CVE-2025-60721`	5.8	7.8	0.0036	2025-11-11
`CVE-2024-36513`	5.7	8.2	0.0022	2024-11-12
`CVE-2025-55210`	5.6	7.5	0.0030	2026-02-12
`CVE-2024-46975`	5.4	7.9	0.0015	2025-02-22
`CVE-2025-9408`	5.4	8.1	0.0011	2025-11-11
`CVE-2020-7019`	5.3	6.5	0.0120	2020-08-18
`CVE-2026-34853`	5.3	7.7	0.0017	2026-04-13
`CVE-2024-8641`	5.2	6.7	0.0049	2024-09-12
`CVE-2024-12570`	5.2	6.7	0.0043	2024-12-12
`CVE-2020-1719`	4.5	5.4	0.0057	2021-06-07
`CVE-2024-37294`	4.4	5.5	0.0043	2024-06-11
`CVE-2025-26499`	4.4	6.0	0.0014	2025-09-11
`CVE-2024-47173`	4.3	5.5	0.0036	2024-10-24
`CVE-2024-51987`	4.2	5.4	0.0023	2024-11-08
`CVE-2025-46406`	4.1	5.6	0.0011	2025-07-10
`CVE-2020-7020`	3.1	3.1	0.0101	2020-10-22