Cyber CrimeNewChina-Linked Chain Roots 25 PAN Firewalls
A suspected Chinese state actor chained PHP2Shell with a Linux kernel flaw to gain root on 25 Palo Alto servers, including a US government domain.
> Search
29 results for “privilege escalation”
Cyber CrimeNew
SecurityExchange Flaw Opens Mailboxes to Insiders
Microsoft pushed out-of-band fixes for CVE-2026-96940, a high-severity Exchange Server authorization flaw rated 8.8.
SecurityMeta Muse flaw widens local attack surface
Researcher says a local attacker can redirect Meta's Muse dictation traffic through an undocumented app setting, with no special privileges.
SecurityFour Kernel Flaws, Public Exploits, One Fix
A researcher published working local-root exploits for four Linux kernel bugs fixed weeks earlier, flagging a patching race for older systems.
SecurityAcronis Backup Plugin Flaw Exploited
Acronis has disclosed CVE-2026-87886, a high-severity Linux privilege-escalation flaw in its cPanel and Plesk backup plugins, citing limited in-the-wild attacks.
SecurityLiteSpeed Enterprise Flaw Risks Root on Shared Hosts
cPanel warns a LiteSpeed Web Server Enterprise bug could let one hosting account gain root on shared servers, with no CVE assigned.
SecurityDefender Bypass Chain Grows Again
Nightmare Eclipse drops ShieldCrash, a fresh Microsoft Defender zero-day that bypasses incomplete fixes for the ShieldBreak exploit.
SecurityNew Record in Microsoft Patches
Microsoft fixes 974 flaws, including two exploited zero-days, but only a few matter to most orgs.
SecurityCrowdStrike Falcon Faces New Zero-Day PoC
The researcher known as Nightmare Eclipse has released FalconFlank, a privilege escalation exploit targeting CrowdStrike Falcon via a Windows Office macro feature.
SecurityGPUThor Bypasses NVIDIA ECC, Risks Root Access
New Rowhammer attack defeats ECC on NVIDIA GPUs, enabling DoS and root-level privilege escalation.
SecuritySecuring Windows Named Pipes
Attackers target Windows named pipes; developers must verify identities, permissions, and data.
SecurityTask Host Flaw Now a Ransomware Tool
CISA confirms ransomware gangs are exploiting a Windows Task Host privilege escalation flaw added to KEV in April.
SecurityPlug and Pwn attacks exploit Windows PnP for SYSTEM
Researchers show fake USB devices can trigger Windows to install vulnerable vendor software, granting SYSTEM privileges.
SecurityCritical Azure SQL Managed Instance Flaw
A high-severity vulnerability in Azure SQL Managed Instance allows unauthorized network-based privilege escalation, requiring immediate attention.
SecurityCritical Microsoft Power Apps Flaw Discovered
A critical authorization vulnerability in Microsoft Power Apps allows remote attackers to elevate privileges, necessitating immediate attention from administrators.
SecurityCritical Azure Active Directory Flaw Found
A high-severity vulnerability in Azure Active Directory allows authorized attackers to perform privilege escalation across the network.
SecurityCritical Microsoft Entra SyncFabric Flaw
A critical privilege escalation vulnerability in the Microsoft Entra Provisioning Service allows authorized attackers to gain elevated network access.
SecurityCritical Adobe Campaign SSRF Flaw Discovered
A critical server-side request forgery vulnerability in Adobe Campaign Classic allows unauthenticated attackers to achieve privilege escalation.
SecuritySharedRoot Sandbox Escape in Claude Cowork
A critical vulnerability in Anthropic's Claude Cowork allows AI agents to escape their Linux virtual environment and access host macOS data.
SecurityAzure App Service Privilege Escalation Flaw
A newly identified critical vulnerability in Azure App Service permits unauthorized network-based privilege escalation.
SecurityPrivilege Escalation Risks in SolarWinds
A critical vulnerability identified in SolarWinds Serv-U allows for unauthorized privilege escalation and potential root code execution.
SecuritySolarWinds Serv-U Privilege Escalation
A critical vulnerability identified in SolarWinds Serv-U allows domain administrators to elevate privileges to system administrator.
SecurityEasy Form Builder Flaw Allows Takeover
A critical vulnerability in a WordPress plugin allows unauthenticated users to gain full administrator access to affected websites.
SecuritySurrealDB Injection Flaw Risks Control
A critical vulnerability in SurrealDB enables privilege escalation and potential root-level takeover via malicious export commands.
SecurityBricksforge Plugin Vulnerability Exposed
A critical privilege escalation flaw in the Bricksforge plugin allows unauthenticated attackers to create new administrator accounts.
SecurityAimogen Pro Vulnerability Allows Access
A critical privilege escalation flaw in the Aimogen Pro WordPress plugin could permit unauthenticated administrative access.
SecurityCritical Privilege Escalation Flaw Found in Bricksforge WordPress Plugin
A critical vulnerability in the Bricksforge WordPress plugin allows unauthenticated attackers to create unauthorized administrator accounts.
SecurityLegacyHive: A New Windows Zero-Day
A persistent security researcher has unveiled a local privilege escalation bug for Windows 11, raising questions about severity.
SecurityWindows Bind Links Weaponized for Evasion
Researchers reveal how attackers leverage native filesystem virtualization to bypass EDR and blind security sensors on Windows systems.