CRN

CISA Confirms Windows Privilege Escalation Flaw Has Seen Exploitation

The U.S. cybersecurity agency also added a recently disclosed Google Pixel flaw to its list of exploited vulnerabilities. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed ...
TechRepublic

New Splunk Windows Flaw Enables Privilege Escalation Attacks

Splunk for Windows has a high-severity flaw that lets local users escalate privileges through misconfigured file permissions. Learn how to fix it. Image generated by Google’s Nano Banana A newly ...
CSOonline

Microsoft patches privilege escalation flaw exploited since 2023

The privilege escalation flaw in the Win23k driver affects older versions of Windows and is one of six zero-day vulnerabilities fixed by Microsoft in its March patch cycle. Microsoft has released ...
Infosecurity-magazine.com

JumpCloud Windows Agent Flaw Enables Local Privilege Escalation

A critical security vulnerability affecting the JumpCloud Remote Assist for Windows agent has been identified, exposing managed endpoints to local privilege escalation and denial-of-service (DoS) ...
TechRepublic

privilege escalation

A critical Zoom vulnerability put Windows users at risk of data theft and system compromise. Zoom has patched the flaw. Users should update immediately. Splunk for Windows has a high-severity flaw ...
CSOonline

Microsoft privilege escalation issue forces the debate: ‘When is something a security hole?’

Fortra has announced what it dubs a Microsoft security hole. There is no dispute that the privilege escalation issue exists, but there is much argument over whether it’s a flaw. Security vendor Fortra ...
Dark Reading

Microsoft Zero-Days Allow Defender Bypass, Privilege Escalation

Microsoft released fixes for a total of 63 bugs in its November 2023 update, including three that threat actors are actively exploiting already and two that were disclosed previously but have not been ...