vimarsana.com

Latest Breaking News On - Local privilege escalation - Page 4 : vimarsana.com

Make-me-admin holes found in Windows, Linux kernel

Copy Move over, PrintNightmare. Microsoft has another privilege-escalation hole in Windows that can be potentially exploited by rogue users and malware to gain admin-level powers. Meanwhile, a make-me-root hole was found in recent Linux kernels. Recent builds of Windows 10, and the preview of Windows 11, have a misconfigured access control list (ACL) for the Security Account Manager (SAM), SYSTEM, and SECURITY registry hive files. As a result of this blunder, non-administrative users may read these databases, if a VSS shadow copy of the system drive is present, and potentially use their contents to gain elevated privileges. According to a US-CERT advisory, the issue appears to affect Windows 10 build 1809 and newer.

Microsoft patch for PrintNightmare vulnerability fails to fix critical security flaw

Microsoft patch for PrintNightmare vulnerability fails to fix critical security flaw
betanews.com - get the latest breaking news, showbiz & celebrity photos, sport news & rumours, viral videos and top stories from betanews.com Daily Mail and Mail on Sunday newspapers.

Old Linux storage bugs, new security patches

A trio of security holes CVE-2021-27365, CVE-2021-27363, and CVE-2021-27364  was found by security company GRIMM researchers in an almost forgotten corner of the mainline Linux kernel. The first two of these have a Common Vulnerability Scoring System (CVSS) score above 7, which is high. While you may not have had a SCSI or iSCSI drive in ages, these 15 years old bugs are still around. One of them could be used in a Local Privilege Escalation (LPE) attack. In other words, a normal user could use them to become the root user. Don t let the word local fool you. As Adam Nichols, Principal of Software Security at GRIMM, said: These issues make the impact of any remotely exploitable vulnerability more severe. Enterprises running publicly facing servers would be at the most risk.

Linux kernel found to have a trio of 15-year-old vulnerabilities that could allow root access

Linux-based operating systems are generally recognized as being far more secure than the likes of Windows and macOS but that s not to say they re without their flaws. Illustrating precisely this is the discovery of no fewer than three vulnerabilities in the Linux kernel that could be exploited to gain root access to a system.

© 2024 Vimarsana

vimarsana © 2020. All Rights Reserved.