Everything CloudSec Pulse has reported about Privilege Escalation: 8 stories, newest first. Part of our Vulnerabilities coverage.
Attackers are actively exploiting a command injection flaw in SiteGuard Server Edition to gain full system control. Organizations must verify exposure before patching.
Windows privilege escalation exploits misconfigurations and code flaws to bypass security boundaries, allowing standard users to gain administrative control over the system.
Hardening the kernel requires limiting user actions before they reach the core, because once code executes there, traditional security controls fail completely.
A critical flaw in OPNsense firewalls allows privilege escalation through manipulated GeoIP data, requiring immediate updates to version 26.1.11.
Microsoft addresses a high-severity integer overflow in .NET Framework that allows remote attackers to elevate privileges on Windows systems.
Self-hosted GitLab breaches often exploit configuration errors and outdated components rather than unknown code flaws, allowing attackers to pivot from web access to full system control.
Default Windows settings leave the memory of the security process readable to standard users, creating an open door for attackers to steal active session tokens.
A critical flaw in Astron Agent allows authenticated users to run code as root, bypass tenant isolation, and access shared credentials in versions prior to 1.1.2.