Privilege Escalation - SudoSecurity

SudoSecurity

Sign in Subscribe

Privilege Escalation

A collection of 6 posts

A Password-Free Path to Root: Inside the macOS Screen Sharing Vulnerability Now Under Attack

A Password-Free Path to Root: Inside the macOS Screen Sharing Vulnerability Now Under Attack

A logic bug in screensharingd let attackers skip authentication entirely and land as root — no password required. Here's how it was found, patched, reverse-engineered, and finally weaponized.

CVE-2026-31431 "Copy Fail": How a 9-Year-Old Linux Kernel Bug Gives Any Local User Root in 732 Bytes

CVE-2026-31431 "Copy Fail": How a 9-Year-Old Linux Kernel Bug Gives Any Local User Root in 732 Bytes

CVE-2026-31431 chains AF_ALG, splice(), and authencesn's ESN scratch write into a deterministic 4-byte page cache write that gives an unprivileged local user root. Full technical breakdown, exploit mechanics, detection, mitigation, and patch status per distro.

BlueHammer: The Unpatched Windows Zero-Day That Weaponizes Microsoft Defender Against Your Own System

BlueHammer: The Unpatched Windows Zero-Day That Weaponizes Microsoft Defender Against Your Own System

BlueHammer is an unpatched, publicly released Windows local privilege escalation exploit that chains Microsoft Defender's update workflow, Volume Shadow Copy, Cloud Files callbacks, and opportunistic locks to reach NT AUTHORITY\SYSTEM from a standard user account.

Anthropic's Claude Now Requires Government ID and a Selfie — Users Are Furious

Anthropic's Claude Now Requires Government ID and a Selfie — Users Are Furious

Anthropic quietly rolled out identity verification for Claude subscriptions, asking for passports and live selfies via third-party vendor Persona. ChatGPT and Gemini require neither. Here's why this decision is a mess, who's actually affected, and what Persona's track record means for your data.

What is Privilege Escalation? How Attackers Go From Foothold to Full Control

What is Privilege Escalation? How Attackers Go From Foothold to Full Control

An attacker starts with a low-privileged shell or user account and escalates to root or Administrator using misconfigurations, SUID binaries, kernel exploits, and Active Directory attacks. Here's every technique, the tools professionals use, and how to harden against it.