Latest Privilege Escalation news

New StackRot Linux kernel flaw allows privilege escalation

A new privilege escalation vulnerability impacting Linux was discovered, enabling unprivileged local users to compromise the kernel and elevate their rights to attain root-level access.
- Bill Toulas
- July 06, 2023
- 03:27 AM
- 1
Exploit released for Cisco AnyConnect bug giving SYSTEM privileges

Proof-of-concept exploit code is now available for a high-severity flaw in Cisco Secure Client Software for Windows (formerly AnyConnect Secure Mobility Client) that can let attackers elevate privileges to SYSTEM.
- Sergiu Gatlan
- June 21, 2023
- 05:49 PM
- 0
Microsoft fixes Azure AD auth flaw enabling account takeover

Microsoft has addressed an Azure Active Directory (Azure AD) authentication flaw that could allow threat actors to escalate privileges and potentially fully take over the target's account.
- Sergiu Gatlan
- June 20, 2023
- 12:38 PM
- 0
Cisco fixes AnyConnect bug giving Windows SYSTEM privileges

Cisco has fixed a high-severity vulnerability found in Cisco Secure Client (formerly AnyConnect Secure Mobility Client) software that can let attackers escalate privileges to the SYSTEM account used by the operating system.
- Sergiu Gatlan
- June 07, 2023
- 02:29 PM
- 0
WordPress Elementor plugin bug let attackers hijack accounts on 1M sites

One of WordPress's most popular Elementor plugins, "Essential Addons for Elementor," was found to be vulnerable to an unauthenticated privilege escalation that could allow remote attacks to gain administrator rights on the site.
- Bill Toulas
- May 11, 2023
- 12:59 PM
- 3
New Linux kernel NetFilter flaw gives attackers root privileges

A new Linux NetFilter kernel flaw has been discovered, allowing unprivileged local users to escalate their privileges to root level, allowing complete control over a system.
- Bill Toulas
- May 09, 2023
- 12:49 PM
- 0
Windows zero-day vulnerability exploited in ransomware attacks

Microsoft has patched a zero-day vulnerability in the Windows Common Log File System (CLFS), actively exploited by cybercriminals to escalate privileges and deploy Nokoyawa ransomware payloads.
- Sergiu Gatlan
- April 11, 2023
- 03:23 PM
- 1
QNAP warns customers to patch Linux Sudo flaw in NAS devices

Taiwanese hardware vendor QNAP warns customers to secure their Linux-powered network-attached storage (NAS) devices against a high-severity Sudo privilege escalation vulnerability.
- Sergiu Gatlan
- March 29, 2023
- 02:15 PM
- 1
Critical flaws in WordPress Houzez theme exploited to hijack websites

Hackers are actively exploiting two critical-severity vulnerabilities in the Houzez theme and plugin for WordPress, two premium add-ons used primarily in real estate websites.
- Bill Toulas
- February 27, 2023
- 01:19 PM
- 1
Citrix fixes severe flaws in Workspace, Virtual Apps and Desktops

Citrix Systems has released security updates for vulnerabilities in its Virtual Apps and Desktops, and Workspace Apps products.
- Bill Toulas
- February 15, 2023
- 01:38 PM
- 1
Exploit released for actively abused ProxyNotShell Exchange bug

Proof-of-concept exploit code has been released online for two actively exploited and high-severity vulnerabilities in Microsoft Exchange, collectively known as ProxyNotShell.
- Sergiu Gatlan
- November 18, 2022
- 03:53 PM
- 0
VMware fixes three critical auth bypass bugs in remote access tool

VMware has released security updates to address three critical severity vulnerabilities in the Workspace ONE Assist solution that enable remote attackers to bypass authentication and elevate privileges to admin.
- Sergiu Gatlan
- November 08, 2022
- 03:24 PM
- 0
VMware vCenter Server bug disclosed last year still not patched

VMware informed customers today that vCenter Server 8.0 (the latest version) is still waiting for a patch to address a high-severity privilege escalation vulnerability disclosed in November 2021.
- Sergiu Gatlan
- October 11, 2022
- 02:42 PM
- 0
Microsoft updates mitigation for ProxyNotShell Exchange zero days

Microsoft has updated the mitigation for the latest Exchange zero-day vulnerabilities tracked as CVE-2022-41040 and CVE-2022-41082, also referred to ProxyNotShell.
- Ionut Ilascu
- October 05, 2022
- 08:58 AM
- 0
Microsoft Exchange server zero-day mitigation can be bypassed

Microsoft has shared mitigations for two new Microsoft Exchange zero-day vulnerabilities tracked as CVE-2022-41040 and CVE-2022-41082, but researchers warn that the mitigation for on-premise servers is far from enough.
- Ionut Ilascu
- October 03, 2022
- 10:21 AM
- 3
VMware patches vCenter Server flaw disclosed in November

Eight months after disclosing a high-severity privilege escalation flaw in vCenter Server's IWA (Integrated Windows Authentication) mechanism, VMware has finally released a patch for one of the affected versions.
- Sergiu Gatlan
- July 12, 2022
- 07:31 PM
- 0
CISA orders agencies to patch new Windows zero-day used in attacks

CISA has added an actively exploited local privilege escalation vulnerability in the Windows Client/Server Runtime Subsystem (CSRSS) to its list of bugs abused in the wild.
- Sergiu Gatlan
- July 12, 2022
- 05:10 PM
- 0
Microsoft Azure FabricScape bug let hackers hijack Linux clusters

Microsoft has fixed a container escape bug dubbed FabricScape in the Service Fabric (SF) application hosting platform that let threat actors escalate privileges to root, gain control of the host node, and compromise the entire SF Linux cluster.
- Sergiu Gatlan
- June 29, 2022
- 06:48 AM
- 0
Exploit released for critical VMware auth bypass bug, patch now

Proof-of-concept exploit code is now available online for a critical authentication bypass vulnerability in multiple VMware products that allows attackers to gain admin privileges.
- Sergiu Gatlan
- May 26, 2022
- 02:21 PM
- 0
Microsoft shares mitigation for Windows KrbRelayUp LPE attacks

Microsoft has shared guidance to help admins defend their Windows enterprise environments against KrbRelayUp attacks that enable attackers to gain SYSTEM privileges on Windows systems with default configurations.
- Sergiu Gatlan
- May 26, 2022
- 11:46 AM
- 1