#privilege-escalation

Copy Fail Linux Flaw Grants Root Access to Local Users

CVE-2026-31431 allows unprivileged Linux users to escalate privileges to root through a page cache vulnerability affecting major distributions.

Pack2TheRoot Linux Flaw Grants Root Access via PackageKit

A critical vulnerability in PackageKit daemon allows local Linux users to escalate privileges and gain root system access.

Microsoft Patches Critical ASP.NET Core Privilege Escalation

Microsoft released emergency out-of-band security updates to fix a critical privilege escalation vulnerability in ASP.NET Core affecting web applications.

Microsoft Defender Zero-Days Under Active Attack

Threat actors are exploiting three zero-day vulnerabilities in Microsoft Defender to escalate privileges on compromised Windows systems.

Three Windows Vulnerabilities Under Active Exploitation

Attackers are exploiting three recently disclosed Windows security flaws to gain SYSTEM privileges and elevated administrator access.

CISA Orders Federal Agencies to Patch Windows Task Host Flaw

CISA added a Windows Task Host privilege escalation vulnerability to its Known Exploited Vulnerabilities catalog, requiring federal agencies to patch immediately.

Zero-Day Windows Exploit Released by Disgruntled Researcher

Security researcher 'Chaotic Eclipse' published proof-of-concept code for an undisclosed Windows zero-day vulnerability enabling local privilege escalation attacks.

Cisco Patches Critical IOS Vulnerabilities in March 2026

Cisco released security patches for multiple high and medium-severity vulnerabilities affecting IOS software that could enable privilege escalation and secure boot bypass.

ConnectWise ScreenConnect Hit by Critical Signature Bypass

ConnectWise warns customers of a cryptographic signature verification flaw in ScreenConnect that enables unauthorized access and privilege escalation attacks.

CVE-2026-3888: Ubuntu Desktop Privilege Escalation Flaw

A high-severity vulnerability in Ubuntu Desktop 24.04+ allows unprivileged attackers to gain root access through privilege escalation.

CrackArmor Flaws Let Attackers Bypass Linux Kernel Security

Nine vulnerabilities in Linux AppArmor module allow unprivileged users to escalate privileges and break container isolation.

Windows Event ID 6276 – Microsoft-Windows-Security-Auditing: Special Privileges Assigned to New Logon

Event ID 6276 records when special privileges are assigned to a user account during logon, indicating elevated access rights have been granted for the session.

Windows Event ID 4976 – Microsoft-Windows-Security-Auditing: Special Logon

Event ID 4976 records when a user account is granted special privileges during logon, typically for service accounts or administrative access requiring elevated permissions.

Windows Event ID 4876 – Security: Special Privileges Assigned to New Logon

Event ID 4876 records when special privileges are assigned to a new user logon session, indicating elevated access rights have been granted during authentication.

Windows Event ID 4717 – Microsoft-Windows-Security-Auditing: System Security Access Was Granted

Event ID 4717 logs when a user or process is granted system security access privileges, typically involving sensitive security operations like backup, restore, or system-level access rights.

Windows Event ID 4673 – Security: Sensitive Privilege Use

Event ID 4673 logs when a user or process attempts to use a sensitive privilege on Windows systems. This security audit event helps track privileged operations and potential security risks.