#privilege-escalation

#privilege-escalation

Microsoft issued fixes for 71 CVEs, highlighting a zero-day vulnerability (CVE-2024-49138) related to Windows CLFS that allows privilege escalation.

PUMAKIT is an advanced Linux rootkit capable of privilege escalation, file hiding, and stealth operations, posing significant cybersecurity threats.

Arbitrary file deletes can be exploited for privilege escalation in Windows, contrary to initial perceptions that they are low-impact exploits.

Microsoft Azure Kubernetes Services had a privilege escalation flaw allowing attacker access to cluster secrets.

The attack leveraged a component called Azure WireServer to obtain sensitive credentials.

Kerberoasting is a significant threat leveraging vulnerabilities in Kerberos authentication, requiring awareness and stronger security measures from companies.

Microsoft's Patch Tuesday revealed a critical flaw in Windows Installer that can allow privilege escalation to SYSTEM level, necessitating immediate action.

CISA added a critical Linux security bug, CVE-2024-1086, actively exploited, granting privilege escalation through a use-after-free vulnerability in Linux kernel versions 5.14-6.6.

Microsoft is addressing two vulnerabilities allowing downgrade attacks on Windows update architecture.

The vulnerabilities, discovered by SafeBreach Labs researcher Alon Leviev, could lead to privilege escalation and security flaw reintroduction.

A tool called Windows Downdate can exploit the vulnerabilities to make fully patched Windows systems vulnerable to past exploits.

Network admins should patch critical vulnerabilities in ArubaOS immediately to avoid remote code execution by privilege escalation.

A vulnerability named ConfusedFunction allows attackers to escalate privileges in Google Cloud Functions and access unauthorized data.

Google has updated Cloud Build to prevent misuse post-responsible disclosure.

Zoom has revealed a critical privilege escalation vulnerability in its products that could allow unauthenticated users to gain higher privileges.

The company has released updates to patch the vulnerability, along with other medium-severity issues.