Oh, this one is nice -

CVE-2019-14287: "Sudo could be made to run commands as root if it called with a specially crafted user ID"