Glossary
Privilege Escalation
Privilege escalation is when a hacker starts with limited access (like a regular employee) and finds ways to get more power (like an admin). It's like a visitor badge somehow turning into a master key. They might start small but end up controlling everything.
What is Privilege Escalation?
The act of exploiting a bug, design flaw, or configuration oversight to gain elevated access to resources that are normally protected from an application or user.
Why Should You Care?
Attackers commonly use privilege escalation to move from initial low-level access to administrator or system-level control, where they can steal sensitive data, deploy malware, or disable security defenses. A single unpatched vulnerability or misconfigured permission can transform a limited foothold into complete system compromise.
Is your business exposed?
Real-World Example
Windows elevation-of-privilege vulnerabilities—such as flaws in the Win32k kernel component or the Print Spooler service (the PrintNightmare issues, CVE-2021-34527)—have allowed attackers with limited local access to escalate to SYSTEM-level control. These bugs affected large numbers of Windows systems and demonstrated how widely used operating system components and administrative services can become escalation vectors when left unpatched.
How to Protect Against Privilege Escalation
- 1.
Apply principle of least privilege to all accounts
- 2.
Keep all systems patched and updated
- 3.
Monitor for suspicious admin activity
Related Terms
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required