Everything BlueTeam Herald has reported about privilege escalation: 7 stories, newest first. Part of our Vulnerabilities coverage.
A high-severity flaw in WP User Manager allows unauthenticated visitors to gain administrator roles without payment if the payment gateway is disconnected.
X.Org Server has released a fix for a high-severity flaw that lets local attackers escalate to root by exploiting a double free in SetGeometry handling.
Privilege escalation relies on broken trust boundaries and misconfigurations, not just unpatched software, making architectural review more valuable than simple patching alone.
A critical vulnerability in Frontend Dashboard versions through 3.0.7 allows attackers to escalate privileges, requiring immediate inventory and containment of exposed instances.
IBM Db2 Mirror for i versions 7.4 through 7.6 contain a critical flaw allowing authenticated attackers to escalate privileges and execute code.
A CVSS 9.8 flaw allows subscribers to gain unauthorized privileges in Sergey AIWU versions 1.5.9 and below, requiring immediate vendor patches.
Small teams face disproportionate risk because default cloud settings grant excessive administrative rights to every new user account automatically.