privilege-escalation 25
- FortiClient EMS Auth Bypass CVE-2026-35616 Actively Exploited to Deploy EKZ Credential Stealer
- LiteSpeed cPanel Plugin CVE-2026-48172 Actively Exploited for Root Privilege Escalation
- Iranian APT Screening Serpens Uses AppDomainManager Hijacking in 2026 Espionage Campaigns
- BYOVD: Exploiting Vulnerable Windows Kernel Drivers Without Their Target Hardware
- DirtyDecrypt PoC Published for Patched Linux Kernel LPE CVE-2026-31635
- MiniPlasma Windows Zero-Day Grants SYSTEM Privileges on Fully Patched Systems
- DirtyDecrypt: Public PoC Released for Linux Kernel Root Escalation Flaw
- Four OpenClaw Vulnerabilities Chain to Enable Data Theft, Privilege Escalation, and Backdoor Planting
- Researcher Drops YellowKey BitLocker Bypass and GreenPlasma Windows EoP Zero-Days
- Fragnesia Linux Kernel LPE (CVE-2026-46300) Grants Root via Page Cache Corruption
- May 2026 Patch Tuesday: 138 CVEs Including Critical Zero-Click Outlook Flaw CVE-2026-40361
- Unit 42 Unpacks AD CS Escalation: Template Misconfigs, Shadow Credentials, and Detection Guidance
- cPanel and WHM Patch Three Vulnerabilities Including RCE and Privilege Escalation
- Dirty Frag Linux Zero-Day Gives Root on All Major Distributions
- CloudZ RAT Abuses Windows Phone Link to Steal Credentials and Bypass 2FA
- 'Copy Fail' Linux Flaw Hits CISA KEV as Active Exploitation Begins
- Critical cPanel and WHM Auth Bypass CVE-2026-41940 Exploited as Zero-Day Since February
- Linux 'Copy Fail' CVE-2026-31431 Enables Root on All Major Distros Since 2017
- Microsoft Patches Entra ID AI Agent Role That Enabled Service Principal Takeover
- 15-Year-Old OpenSSH Flaw Allowed Full Root Shell Access via Certificate Principal Parsing Bug
- Microsoft Defender Zero-Day Exploited to Dump NTLM Hashes and Gain SYSTEM Privileges
- Microsoft Issues Emergency Out-of-Band Patches for Critical ASP.NET Core Privilege Escalation
- Windows Zero-Days Leaked, Now Actively Exploited for SYSTEM Privileges
- Palo Alto Networks and SonicWall Patch High-Severity Privilege Escalation Bugs
- AWS Bedrock AgentCore Flaw Enables "Agent God Mode" via IAM Privilege Escalation