#privilege-escalation
-
Tailworm: Tailscale SSH Flaws Could Let One Hacked Device Reach Root on Other Servers
Researcher Erica Windisch has detailed a chain of flaws in which a single compromised device on a Tailscale network can reach root on other machines. No patch exists yet.
-
Plug and Pwn: USB Driver Auto-Install Becomes a SYSTEM Takeover on Windows 11
Researchers showed how Windows' built-in Plug and Play mechanism can be coerced into installing signed vendor software for a spoofed USB device and, through a chain of vulnerabilities, into granting SYSTEM privileges — including remotely over RDP.