Tag: privilege escalation

Metabase Releases Security Updates After Zero Day Vulnerability Grants Unauthorized Administrator Access

Risk & ResilienceAugust 8, 2026

Metabase has released security updates after confirming active exploitation of a zero day vulnerability that allows attackers to gain administrator access without authentication.

Black Hat 2026 Research Reveals CSS Techniques That Can Target Webmail Passwords And Authentication Tokens

Risk & ResilienceAugust 8, 2026

Research presented at Black Hat USA 2026 demonstrates CSS based attack techniques affecting major webmail services, highlighting risks involving passwords, authentication tokens, and AI connected email workflows.

DirtyClone Linux Kernel Flaw Allows Local Users To Gain Root Access Through Cloned Packets

Risk & ResilienceJune 29, 2026

Researchers have disclosed DirtyClone, a Linux kernel vulnerability tracked as CVE 2026 43503 that enables local privilege escalation by corrupting cached memory through cloned network packets.

CISA Adds LiteSpeed CPanel Plugin Vulnerability To Known Exploited Vulnerabilities Catalog

Risk & ResilienceJune 16, 2026

CISA adds CVE 2026 54420 affecting LiteSpeed cPanel Plugin to its Known Exploited Vulnerabilities catalog, warning of root privilege escalation risks on shared hosting servers.

Linux Kernel Vulnerability CVE 2026 23111 Enables Local Root Access As Public Exploits Emerge

Risk & ResilienceJune 9, 2026

Security researchers have published public exploits for Linux kernel vulnerability CVE 2026 23111, allowing local privilege escalation to root and container escape on affected systems.

Google Releases June 2026 Android Security Update Fixing 124 Vulnerabilities

Risk & ResilienceJune 4, 2026

Google has released its June 2026 Android security update addressing 124 vulnerabilities, including an actively exploited high severity flaw affecting Android 14, 15, and 16 devices.

Researchers Examine BYOVD Risks Through Vulnerable Windows Drivers Without Hardware Dependencies

Risk & ResilienceMay 23, 2026

New cybersecurity research highlights how vulnerable Windows kernel mode drivers may remain exploitable without dedicated hardware, raising concerns around BYOVD attacks and endpoint security risks.

Windows Zero Days Expose BitLocker Bypasses And CTFMON Privilege Escalation Risks

Risk & ResilienceMay 15, 2026

Security researchers have disclosed new Windows zero day vulnerabilities affecting BitLocker and CTFMON, exposing privilege escalation and encryption bypass risks across Windows 11 and Windows Server systems.

Linux Kernel Dirty Frag Vulnerability Enables Root Access Across Major Linux Distributions

Risk & ResilienceMay 8, 2026

Dirty Frag Linux kernel vulnerability enables local privilege escalation to root across major distributions including Ubuntu, RHEL, Fedora, and CentOS, with active exploitation risk.

Microsoft Issues Emergency Patch For ASP.NET Core CVE 2026 40372 Privilege Escalation Vulnerability

Risk & ResilienceApril 23, 2026

Microsoft has released an out of band update fixing CVE 2026 40372 in ASP.NET Core, a critical privilege escalation flaw affecting DataProtection cryptography that could allow SYSTEM level access under specific conditions.

GPUBreach Attack Exploits GDDR6 GPU Memory To Achieve Full CPU Privilege Escalation

Risk & ResilienceApril 7, 2026

GPUBreach, a new RowHammer attack targeting GDDR6 GPUs, enables arbitrary GPU memory access and full CPU privilege escalation, posing risks for cloud AI and multi-tenant deployments.