Latest Privilege Escalation news

CISA adds 41 vulnerabilities to list of bugs used in cyberattacks

The Cybersecurity & Infrastructure Security Agency (CISA) has added 41 vulnerabilities to its catalog of known exploited flaws over the past two days, including flaws for the Android kernel and Cisco IOS XR.
- Bill Toulas
- May 24, 2022
- 01:50 PM
- 0
VMware patches critical auth bypass flaw in multiple products

VMware warned customers today to immediately patch a critical authentication bypass vulnerability "affecting local domain users" in multiple products that can be exploited to obtain admin privileges.
- Sergiu Gatlan
- May 18, 2022
- 12:01 PM
- 0
New Nimbuspwn Linux vulnerability gives hackers root privileges

A new set of vulnerabilities collectively tracked as Nimbuspwn could let local attackers escalate privileges on Linux systems to deploy malware ranging from backdoors to ransomware.
- Ionut Ilascu
- April 27, 2022
- 01:59 AM
- 0
CISA warns of attackers now exploiting Windows Print Spooler bug

The Cybersecurity and Infrastructure Security Agency (CISA) has added three new security flaws to its list of actively exploited bugs, including a local privilege escalation bug in the Windows Print Spooler.
- Sergiu Gatlan
- April 19, 2022
- 06:08 PM
- 0
Cisco vulnerability lets hackers craft their own login credentials

Cisco has released a security advisory to warn about a critical vulnerability (CVSS v3 score: 10.0), tracked as CVE-2022-20695, impacting the Wireless LAN Controller (WLC) software.
- Bill Toulas
- April 15, 2022
- 01:54 PM
- 0
CISA warns orgs to patch actively exploited Windows LPE bug

The Cybersecurity and Infrastructure Security Agency (CISA) has added ten new security bugs to its list of actively exploited vulnerabilities, including a high severity local privilege escalation bug in the Windows Common Log File System Driver.
- Sergiu Gatlan
- April 13, 2022
- 06:48 PM
- 1
Mozilla fixes Firefox bug letting you get Windows admin privileges

Mozilla released a security update to address a high severity privilege escalation vulnerability found in the Mozilla Maintenance Service.
- Sergiu Gatlan
- February 08, 2022
- 11:56 AM
- 1
CISA orders federal agencies to patch actively exploited Windows bug

The Cybersecurity and Infrastructure Security Agency (CISA) has ordered federal agencies to patch their systems against an actively exploited Windows vulnerability that enables attackers to gain SYSTEM privileges.
- Sergiu Gatlan
- February 04, 2022
- 01:05 PM
- 0
ESET antivirus bug let attackers gain Windows SYSTEM privileges

Slovak internet security firm ESET released security fixes to address a high severity local privilege escalation vulnerability affecting multiple products on systems running Windows 10 and later or Windows Server 2016 and above.
- Sergiu Gatlan
- February 02, 2022
- 05:00 PM
- 0
Windows vulnerability with new public exploits lets you become admin

A security researcher has publicly disclosed an exploit for a Windows local privilege elevation vulnerability that allows anyone to gain admin privileges in Windows 10.
- Lawrence Abrams
- January 29, 2022
- 02:06 PM
- 5
Linux system service bug gives root on all major distros, exploit released

A vulnerability in Polkit's pkexec component identified as CVE-2021-4034 (PwnKit) is present in the default configuration of all major Linux distributions and can be exploited to gain full root privileges on the system, researchers warn today.
- Ionut Ilascu
- January 25, 2022
- 03:44 PM
- 2
McAfee Agent bug lets hackers run code with Windows SYSTEM privileges

McAfee Enterprise (now rebranded as Trellix) has patched a security vulnerability discovered in the company's McAfee Agent software for Windows enabling attackers to escalate privileges and execute arbitrary code with SYSTEM privileges.
- Sergiu Gatlan
- January 21, 2022
- 08:22 AM
- 0
800K WordPress sites still impacted by critical SEO plugin flaw

Two critical and high severity security vulnerabilities in the highly popular "All in One" SEO WordPress plugin exposed over 3 million websites to takeover attacks.
- Sergiu Gatlan
- December 21, 2021
- 02:25 PM
- 1
Microsoft warns of easy Windows domain takeover via Active Directory bugs

Microsoft warned customers today to patch two Active Directory domain service privilege escalation security flaws that, when combined, allow attackers to easily takeover Windows domains.
- Sergiu Gatlan
- December 20, 2021
- 02:51 PM
- 5
Attackers can get root by crashing Ubuntu’s AccountsService

A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME's AccountsService component.
- Sergiu Gatlan
- December 13, 2021
- 12:05 PM
- 0
27 flaws in USB-over-network SDK affect millions of cloud users

Researchers have discovered 27 vulnerabilities in Eltima SDK, a library used by numerous cloud providers to remotely mount a local USB device.
- Bill Toulas
- December 07, 2021
- 10:15 AM
- 0
New Windows 10 zero-day gives admin rights, gets unofficial patch

Free unofficial patches have been released to protect Windows users from a local privilege escalation (LPE) zero-day vulnerability in the Mobile Device Management Service impacting all Windows 10 versions from v1809 to v21H1.
- Sergiu Gatlan
- November 27, 2021
- 10:00 AM
- 0
Mediatek eavesdropping bug impacts 30% of all Android smartphones

MediaTek fixed security vulnerabilities that could have allowed attackers to eavesdrop on Android phone calls, execute commands, or elevate their privileges to a higher level.
- Bill Toulas
- November 24, 2021
- 09:23 AM
- 0
Zero-day bug in all Windows versions gets free unofficial patch

A free and unofficial patch is now available for a zero-day local privilege escalation vulnerability in the Windows User Profile Service that lets attackers gain SYSTEM privileges under certain conditions.
- Sergiu Gatlan
- November 12, 2021
- 07:28 AM
- 2
Chinese hackers use Windows zero-day to attack defense, IT firms

A Chinese-speaking hacking group exploited a zero-day vulnerability in the Windows Win32k kernel driver to deploy a previously unknown remote access trojan (RAT).
- Sergiu Gatlan
- October 12, 2021
- 02:01 PM
- 1