Hacker News with Generative AI: Privilege Escalation

A privilege escalation from Chrome extensions (2023) (0x44.xyz)
In July, I was poking around in chrome://file-manager, ChromeOS's file manager, when I saw an interesting URL in localStorage:
Security, Chrome, Browser Extensions, Privilege Escalation
66 points by deryilz 31 days ago | 10 comments
Using PDDL to find privilege escalation paths (usenix.org)
Current academic vulnerability research predominantly focuses on identifying individual bugs and exploits in programs and systems. However, this goes against the growing trend of modern, advanced attacks that rely on a sequence of steps (i.e., a chain of exploits) to achieve their goals, often incorporating individually benign actions.
Cybersecurity, Security Research, Privilege Escalation, AI, Programming Languages
7 points by peperunas 72 days ago | 0 comments
Ubuntu Linux impacted by decade-old 'needrestart' flaw that gives root (bleepingcomputer.com)
Five local privilege escalation (LPE) vulnerabilities have been discovered in the needrestart utility used by default in Ubuntu Linux since version 21.04, which were introduced over 10 years ago.
Ubuntu, Security, Vulnerability, Linux, Privilege Escalation
6 points by akyuu 218 days ago | 2 comments
Abusing Ubuntu 24.04 features for root privilege escalation (snyk.io)
With the recent release of Ubuntu 24.04, we at Snyk Security Labs thought it would be interesting to examine the latest version of this Linux distribution to see if we could find any interesting privilege escalation vulnerabilities.
Security, Ubuntu, Linux, Privilege Escalation
189 points by saltypal 227 days ago | 77 comments
CVE-2024-45844: Privilege escalation in F5 BIG-IP (almond.consulting)
The previous articles Post-Exploiting an F5 BIG-IP: root, and now what? and Deep diving into F5 Secure Vault helped us to get a better understanding of the internal F5 mechanisms.
Cybersecurity, F5, Vulnerability, Privilege Escalation, Software
12 points by notmine1337 245 days ago | 0 comments
Local Privilege Escalation via MSI Installer (sec-consult.com)
The MSI installers of SoftMaker Office and FreeOffice (SoftMaker) contained a privilege escalation vulnerability.
Security, Software, Vulnerability, Privilege Escalation
20 points by trustinmenowpls 288 days ago | 6 comments
DEF Con 32 – AMD Sinkclose Universal Ring-2 Privilege Escalation (Not Redacted) [pdf] (defcon.org)
DEF Con, Security, Privilege Escalation, Vulnerabilities, AMD
195 points by ruik 293 days ago | 30 comments
SinkClose flaw impacts AMD EPYC and Ryzen CPUs, helps gain Ring -2 privileges (bleepingcomputer.com)
Security, AMD, CPUs, Privilege Escalation
13 points by transpute 322 days ago | 2 comments