Privilege Escalation – Page 4

ESET Fixes Privilege Escalation Flaw in its Engine

ESET has released patches to address a high severity local privilege escalation vulnerability, tracked CVE-2021-37852, impacting its Windows clients. An attacker can exploit the vulnerability to misuse the AMSI scanning…

PravinKarthik February 4, 2022

Linux Vulnerability Provides Root Access to Attackers

A newly discovered 12-year-old vulnerability dubbed “PwnKit in a Linux system tool Polkit can give attackers root privileges on machines running the operating system. Polkit, previously known as PolicyKit, is…

PravinKarthik January 27, 2022

McAfee Endpoint Base Agent Vulnerable to Privilege Escalation

Two vulnerabilities have been found in the McAfee endpoint Agent version prior to 5.7.5. CVE-2021-31854 and CVE-2022-0166 comes haunting the endpoint devices could indulge in privilege escalation and executing Arbitrary…

PravinKarthik January 21, 2022

Microsoft Urges to Patch AD Vulnerability

Microsoft released an alert on two AD vulnerabilities addressed with the November 2021 Patch Tuesday, urging customers to install the available patches as soon as possible, to prevent potential compromise.…

PravinKarthik December 21, 2021

Privilege Escalation Haunts Lenovo Laptops

A privilege elevation issues in Lenovo laptops, including ThinkPad and Yoga families, are affected by that resides in the ImControllerService service allowing attackers to execute commands with admin privileges. the vulnerabilities,…

PravinKarthik December 17, 2021

Hillrom Products Vulnerable to Privilege Escalation

A critical high-severity vulnerability in several cardiac healthcare devices could allow attackers to access privileged accounts without a password and seize control of the devices. The authentication bypass flaw in…

PravinKarthik December 14, 2021

Privilege Escalation can Crash Ubuntu

A local privilege escalation security vulnerability could allow attackers to gain root access on Ubuntu systems by exploiting a double-free memory corruption bug in GNOME's D-Bus service, AccountsService component. Tracked…

PravinKarthik December 14, 2021

0Patch Releases Patch for Privilege Escalation Zero Day

0patch released free unofficial patches for Windows local privilege escalation zero-day (CVE-2021-24084) in Windows 10, version 1809 and later. The issue doesn’t impact Windows Servers because the vulnerable functionality in…

PravinKarthik November 28, 2021