Latest Privilege Escalation news

Microsoft fixes critical bugs in secretly installed Azure Linux app

Microsoft has addressed four critical vulnerabilities collectively known as OMIGOD, found in the Open Management Infrastructure (OMI) software agent silently installed on Azure Linux machines accounting for more than half of Azure instances.
- Sergiu Gatlan
- September 15, 2021
- 05:05 PM
- 0
Millions of HP OMEN gaming PCs impacted by driver vulnerability

Millions of HP OMEN laptop and desktop gaming computers are exposed to attacks by a high severity vulnerability that can let threat actors trigger denial of service states or escalate privileges and disable security solutions.
- Sergiu Gatlan
- September 14, 2021
- 07:00 AM
- 2
Remote print server gives anyone Windows admin privileges on a PC

A researcher has created a remote print server allowing any Windows user with limited privileges to gain complete control over a device simply by installing a print driver.
- Lawrence Abrams
- July 31, 2021
- 02:23 PM
- 1
Linux eBPF bug gets root privileges on Ubuntu - Exploit released

A security researcher released exploit code for a high-severity vulnerability in Linux kernel eBPF (Extended Berkeley Packet Filter) that can give an attacker increased privileges on Ubuntu machines.
- Ionut Ilascu
- July 30, 2021
- 12:26 PM
- 0
Microsoft shares workaround for Windows 10 SeriousSAM vulnerability

Microsoft has shared a workaround for a Windows 10 zero-day vulnerability dubbed SeriousSAM that can let attackers gain admin rights on vulnerable systems and execute arbitrary code with SYSTEM privileges.
- Sergiu Gatlan
- July 21, 2021
- 04:32 AM
- 3
New Windows 10 vulnerability allows anyone to get admin privileges

Windows 10 and Windows 11 are vulnerable to a local elevation of privilege vulnerability after discovering that users with low privileges can access sensitive Registry database files.
- Lawrence Abrams
- July 20, 2021
- 12:27 PM
- 10
New Linux kernel bug lets you get root on most modern distros

Unprivileged attackers can gain root privileges by exploiting a local privilege escalation (LPE) vulnerability in default configurations of the Linux Kernel's filesystem layer on vulnerable devices.
- Sergiu Gatlan
- July 20, 2021
- 12:21 PM
- 0
16-year-old bug in printer software gives hackers admin rights

A 16-year-old security vulnerability found in HP, Xerox, and Samsung printers drivers allows attackers to gain admin rights on systems using the vulnerable driver software.
- Sergiu Gatlan
- July 20, 2021
- 07:00 AM
- 2
VMware fixes authentication bypass in Carbon Black App Control

VMware Carbon Black App Control has been updated this week to fix a critical-severity vulnerability that allows access to the server without authentication.
- Ionut Ilascu
- June 23, 2021
- 01:40 PM
- 0
Linux system service bug lets you get root on most modern distros

Unprivileged attackers can get a root shell by exploiting an authentication bypass vulnerability in the polkit auth system service installed by default on many modern Linux distributions.
- Sergiu Gatlan
- June 11, 2021
- 07:58 AM
- 5
Huawei USB LTE dongles are vulnerable to privilege escalation attacks

This week, a Trustwave security researcher disclosed a privilege escalation flaw in Huawei's USB LTE dongles.
- Ax Sharma
- June 02, 2021
- 10:33 AM
- 0
Cisco bugs allow creating admin accounts, executing commands as root

Cisco has fixed critical SD-WAN vManage and HyperFlex HX software security flaws that could enable remote attackers to execute commands as root or create rogue admin accounts.
- Sergiu Gatlan
- May 05, 2021
- 02:51 PM
- 0
Vulnerable Dell driver puts hundreds of millions of systems at risk

A driver that's been pushed for the past 12 years to Dell computer devices for consumers and enterprises contains multiple vulnerabilities that could lead to increased privileges on the system.
- Ionut Ilascu
- May 04, 2021
- 09:07 AM
- 1
Microsoft partially fixes Windows 7, Server 2008 vulnerability

Microsoft has partially fixed a local privilege escalation (LPE) vulnerability impacting all Windows 7 and Server 2008 R2 devices.
- Sergiu Gatlan
- April 20, 2021
- 12:09 PM
- 0
Microsoft fixes Windows PSExec privilege elevation vulnerability

Microsoft has fixed a vulnerability in the PsExec utility that allows local users to gain elevated privileges on Windows devices.
- Lawrence Abrams
- March 24, 2021
- 03:52 PM
- 1
15-year-old Linux kernel bugs let attackers gain root privileges

Three security vulnerabilities found in the iSCSI subsystem of the Linux kernel could allow local attackers with basic user privileges to gain root privileges on unpatched Linux systems.
- Sergiu Gatlan
- March 13, 2021
- 10:15 AM
- 0
Recently fixed Windows zero-day actively exploited since mid-2020

Microsoft says that a high-severity Windows zero-day vulnerability patched during the February 2021 Patch Tuesday was exploited in the wild since at least the summer of 2020 according to its telemetry data.
- Sergiu Gatlan
- February 20, 2021
- 10:31 AM
- 0
Intel fixes vulnerabilities in Windows, Linux graphics drivers

Intel addressed 57 vulnerabilities during this month's Patch Tuesday, including high severity ones impacting Intel Graphics Drivers.
- Sergiu Gatlan
- February 11, 2021
- 10:02 AM
- 0
12-year-old Windows Defender bug gives hackers admin rights

Microsoft has fixed a privilege escalation vulnerability in Microsoft Defender Antivirus (formerly Windows Defender) that could allow attackers to gain admin rights on unpatched Windows systems.
- Sergiu Gatlan
- February 11, 2021
- 09:00 AM
- 0
Apple fixes SUDO root privilege escalation flaw in macOS

Apple has fixed a sudo vulnerability in macOS Big Sur, Catalina, and Mojave, allowing any local user to gain root-level privileges.
- Lawrence Abrams
- February 09, 2021
- 07:07 PM
- 0