SecurityGPUThor Bypasses NVIDIA ECC, Risks Root Access
New Rowhammer attack defeats ECC on NVIDIA GPUs, enabling DoS and root-level privilege escalation.
> Search
20 results for “privilege escalation”
Security
SecuritySecuring Windows Named Pipes
Attackers target Windows named pipes; developers must verify identities, permissions, and data.
SecurityTask Host Flaw Now a Ransomware Tool
CISA confirms ransomware gangs are exploiting a Windows Task Host privilege escalation flaw added to KEV in April.
SecurityPlug and Pwn attacks exploit Windows PnP for SYSTEM
Researchers show fake USB devices can trigger Windows to install vulnerable vendor software, granting SYSTEM privileges.
SecurityCritical Azure SQL Managed Instance Flaw
A high-severity vulnerability in Azure SQL Managed Instance allows unauthorized network-based privilege escalation, requiring immediate attention.
SecurityCritical Microsoft Power Apps Flaw Discovered
A critical authorization vulnerability in Microsoft Power Apps allows remote attackers to elevate privileges, necessitating immediate attention from administrators.
SecurityCritical Azure Active Directory Flaw Found
A high-severity vulnerability in Azure Active Directory allows authorized attackers to perform privilege escalation across the network.
SecurityCritical Microsoft Entra SyncFabric Flaw
A critical privilege escalation vulnerability in the Microsoft Entra Provisioning Service allows authorized attackers to gain elevated network access.
SecurityCritical Adobe Campaign SSRF Flaw Discovered
A critical server-side request forgery vulnerability in Adobe Campaign Classic allows unauthenticated attackers to achieve privilege escalation.
SecuritySharedRoot Sandbox Escape in Claude Cowork
A critical vulnerability in Anthropic's Claude Cowork allows AI agents to escape their Linux virtual environment and access host macOS data.
SecurityAzure App Service Privilege Escalation Flaw
A newly identified critical vulnerability in Azure App Service permits unauthorized network-based privilege escalation.
SecurityPrivilege Escalation Risks in SolarWinds
A critical vulnerability identified in SolarWinds Serv-U allows for unauthorized privilege escalation and potential root code execution.
SecuritySolarWinds Serv-U Privilege Escalation
A critical vulnerability identified in SolarWinds Serv-U allows domain administrators to elevate privileges to system administrator.
SecurityEasy Form Builder Flaw Allows Takeover
A critical vulnerability in a WordPress plugin allows unauthenticated users to gain full administrator access to affected websites.
SecuritySurrealDB Injection Flaw Risks Control
A critical vulnerability in SurrealDB enables privilege escalation and potential root-level takeover via malicious export commands.
SecurityBricksforge Plugin Vulnerability Exposed
A critical privilege escalation flaw in the Bricksforge plugin allows unauthenticated attackers to create new administrator accounts.
SecurityAimogen Pro Vulnerability Allows Access
A critical privilege escalation flaw in the Aimogen Pro WordPress plugin could permit unauthenticated administrative access.
SecurityCritical Privilege Escalation Flaw Found in Bricksforge WordPress Plugin
A critical vulnerability in the Bricksforge WordPress plugin allows unauthenticated attackers to create unauthorized administrator accounts.
SecurityLegacyHive: A New Windows Zero-Day
A persistent security researcher has unveiled a local privilege escalation bug for Windows 11, raising questions about severity.
SecurityWindows Bind Links Weaponized for Evasion
Researchers reveal how attackers leverage native filesystem virtualization to bypass EDR and blind security sensors on Windows systems.