15 stories tagged privilege-escalation, newest first.
5 points by theanonymousone | 0 comments
Tailworm is a security assessment report detailing multiple vulnerabilities in Tailscale v1.104.2 and headscale v0.29.5, including SSH socket-forwarding races and wormable spread.
188 points by rs_rs_rs_rs_rs | 58 comments
A Calif research post by Andrew Griffiths describing how a 37-year-old OpenBSD kernel bug involving a small counter was exploited to gain a root shell.
107 points by safateam | 27 comments
Technical write-up detailing full exploitation of an Avast Antivirus double-fetch kernel bug on Windows 11, from paged pool overflow to SYSTEM privilege escalation.
471 points by trap0xcc | 451 comments
Blog post describing a flaw in Omarchy's default Docker configuration that let any desktop user process escalate to root without a password; fixed in 4.0.1.
564 points by thunderbong | 269 comments
An X post showing OpenAI Codex gaining root-equivalent access without sudo by using the user's Docker group membership to bind-mount and modify /etc.
421 points by happyhardcore | 223 comments
Google Project Zero blog post by Seth Jenkins describing a zero-click exploit chain achieving root on the Google Pixel 10, following an earlier Pixel 9 chain.
785 points by flipped | 310 comments
An oss-security mailing list post disclosing "Dirty Frag," a Linux local privilege escalation chaining two kernel bugs, released unpatched after the embargo broke.
565 points by ori_b | 477 comments
An oss-security mailing list reply from Gentoo's Sam James on CVE-2026-31431 (CopyFail), a Linux local privilege escalation, and the lack of advance notice to distributions.
1261 points by unsnap_biceps | 448 comments
Disclosure site for Copy Fail (CVE-2026-31431), a Linux kernel logic-flaw local privilege escalation exploitable by a 732-byte Python script on distros since 2017.
325 points by StefanBatory | 82 comments
GTFOBins is a curated list of Unix-like executables whose legitimate functions can be abused to bypass local security restrictions in misconfigured systems.
493 points by kykeonaut | 232 comments
NVD entry for CVE-2026-33579, a privilege escalation vulnerability in OpenClaw; the captured screenshot shows a Reddit network-policy block page instead.
341 points by uponasmile | 136 comments
Eye Security research blog post describing how the team gained root access inside Microsoft Copilot's code execution sandbox.
336 points by smig0 | 227 comments
BleepingComputer news article about a udisks vulnerability that lets attackers gain root privileges on major Linux distributions.
637 points by 1317 | 141 comments
David Buchanan's blog post showing how electromagnetic fault injection on DRAM using a piezo cigarette lighter can be exploited to gain root on a laptop.
372 points by Unroll0201 | 102 comments
GitHub repository with a universal local privilege escalation proof-of-concept exploit for CVE-2024-1086 in Linux nf_tables, affecting kernels v5.14 to v6.6.