Local Privilege Escalation

Google fixes Android kernel zero-day exploited in attacks

February 4, 2025February 4, 2025 geekfeed0Tagged Actively Exploited, android, Elevation of Privileges, Kernel, Local Privilege Escalation, Privilege Escalation, vulnerability, Zero-Day

The January 2025 Android security updates patch 48 vulnerabilities, including a zero-day kernel vulnerability tagged as exploited in the wild. This high-severity zero-day (tracked as CVE-2024-53104) is a privilege escalation security flaw in the Android Kernel’s USB Video Class driver that allows authenticated local threat actors to elevate privileges in low-complexity attacks. The issue occurs because the driver […]

2 mins read

Hackers use Windows RID hijacking to create hidden admin account

January 26, 2025January 26, 2025 geekfeed0Tagged Andariel, Elevation of Privileges, Lazarus hacker group, Local Privilege Escalation, Privilege Escalation, RID Hijacking, windows, Windows hidden admin account

A North Korean threat group has been using a technique called RID hijacking that tricks Windows into treating a low-privileged account as one with administrator permissions. The hackers used a custom malicious file and an open source tool for the hijacking attack. Both utilities can perform the attack but researchers at South Korean cybersecurity company AhnLab say that […]

3 mins read

Ubuntu Linux impacted by decade-old ‘needrestart’ flaw that gives root

November 21, 2024November 21, 2024 geekfeed0Tagged linux, Local Privilege Escalation, Needrestart, root, ubuntu, vulnerability

Five local privilege escalation (LPE) vulnerabilities have been discovered in the needrestart utility used by Ubuntu Linux, which was introduced over 10 years ago in version 21.04. The flaws were discovered by Qualys and are tracked as CVE-2024-48990, CVE-2024-48991, CVE-2024-48992, CVE-2024-10224, and CVE-2024-11003. They were introduced in needrestart version 0.8, released in April 2014, and fixed only […]

3 mins read

Google fixes two Android zero-days used in targeted attacks

November 5, 2024November 5, 2024 geekfeed0Tagged Actively Exploited, android, android zero day, Elevation of Privileges, google, Local Privilege Escalation

Google fixed two actively exploited Android zero-day flaws as part of its November security updates, addressing a total of 51 vulnerabilities. Tracked as CVE-2024-43047 and CVE-2024-43093, the two issues are marked as exploited in limited, targeted attacks. “There are indications that the following may be under limited, targeted exploitation,” says Google’s advisory. The CVE-2024-43047 flaw is […]

2 mins read