Privilege Escalation
The latest Privilege Escalation coverage — news, analysis, and updates from the WindowsNews.AI desk.
CVE-2026-4105: Critical Systemd Machined Privilege Escalation Vulnerability Patched
A critical privilege escalation vulnerability in systemd's machine-management component has been disclosed and patched, requiring immediate attention from Linux administrators and users. Tracked as...
Microsoft's March Patch Tuesday Fixes Critical SQL Server Privilege Escalation Vulnerability CVE-2026-21262
Microsoft's March Patch Tuesday security update includes a critical fix for a high-severity elevation-of-privilege vulnerability in Microsoft SQL Server, identified as CVE-2026-21262. This security...
CVE-2026-26117 lets low-privilege users hijack Azure Arc agents, escalate to SYSTEM, and take over cloud identities.
Microsoft has disclosed a critical vulnerability in the Azure Arc Connected Machine agent for Windows that enables local privilege escalation and cloud identity takeover. CVE-2026-26117 represents a...
Microsoft Patches Critical Linux Azure Diagnostic Extension Vulnerability CVE-2026-23665
Microsoft has addressed a critical elevation-of-privilege vulnerability in the Linux Azure Diagnostic extension (LAD) tracked as CVE-2026-23665. The security flaw, a heap buffer overflow, could allow...
CVE-2026-26132: Windows Kernel Use-After-Free Vulnerability Requires Immediate Patch Tuesday Attention
Microsoft has confirmed CVE-2026-26132 as a critical Windows Kernel use-after-free vulnerability that allows authorized local users to gain elevated privileges on affected systems. The security flaw,...
Microsoft Patches Critical .NET 10 Linux Privilege Escalation Vulnerability CVE-2026-26131
Microsoft released a security patch on March 10, 2026 addressing CVE-2026-26131, a critical elevation-of-privilege vulnerability in .NET 10 for Linux systems. The flaw stems from incorrect default...
CVE-2026-26128: Critical Windows SMB Server Privilege Escalation Vulnerability Analysis
Microsoft has cataloged CVE-2026-26128 as an elevation-of-privilege defect in the Windows SMB Server that allows an authorized (local) attacker to escalate privileges on affected systems. This...
Microsoft Patches Critical SCOM Privilege Escalation Vulnerability CVE-2026-20967
Microsoft released a security update on March 10, 2026 addressing an authenticated, network-based elevation-of-privilege vulnerability in System Center Operations Manager tracked as CVE-2026-20967....
Microsoft Confirms Critical DWM Privilege Escalation Vulnerability CVE-2026-25189
Microsoft has officially documented CVE-2026-25189, a confirmed use-after-free vulnerability in the Windows Desktop Window Manager (DWM) Core Library that enables local privilege escalation. The...
CVE-2026-25175: Critical Windows NTFS Privilege Escalation Vulnerability Discovered
Microsoft has documented a new elevation-of-privilege vulnerability in the Windows NTFS file system driver, designated CVE-2026-25175. The security flaw involves an out-of-bounds read in the NTFS...
CVE-2026-25170: Windows Hyper-V Use-After-Free Vulnerability Enables Local Privilege Escalation
Microsoft documented CVE-2026-25170 on March 10, 2026, a critical use-after-free vulnerability in Windows Hyper-V that enables local privilege escalation. The Common Weakness Enumeration identifier...
Microsoft Patches Critical Windows Device Association Service Race Condition in March 2026 Patch Tuesday
Microsoft's March 10, 2026 Patch Tuesday security update addresses a critical vulnerability in the Windows Device Association Service that could allow local privilege escalation. Tracked as...