Stay informed on the latest exploit trends and vulnerabilities. Get expert insights and updates on information security exploits with our dedicated tag.
Search across headline titles and summaries.
Background for this topic.
Exploit is a piece of software, a chunk of data, or a sequence of commands that takes advantage of a bug or vulnerability in order to cause unintended or unanticipated behavior to occur on computer software, hardware, or something electronic (usually computerized). This behavior often includes such things as gaining control of a computer system, allowing privilege escalation, or a denial-of-service attack.
In the context of information security, an exploit typically allows an attacker to gain access to a system or network and possibly provide the attacker with elevated privileges. Exploits are often the first step in a larger attack campaign where an initial foothold is established by the attacker, who might then deploy further malicious activities, such as data exfiltration, ransomware, or persistent access for future exploitation. Security professionals actively work to discover and patch vulnerabilities to prevent these exploits, while attackers continuously seek out new ones as a means of bypassing security measures.
Weekly headline count for the current query.
Fresh kernel flaw comes with public exploit code and continues ugly run of highly reliable privilege escalation bugs tied to memory and page-cache handling
The privilege escalation vulnerability, which is similar to other Linux flaws like Copy Fail and Dirty Pipe, may already be under limited exploitation.
No Patches Yet Available, After Third Party Published Vulnerability DetailsSecurity researchers have discovered a new, critical flaw in the Linux kernel that attackers can exploit to gain root access. No patches are yet available to fix "Dirty Frag," the second new local privilege escalation flaw to be found in two weeks, following the similar "Copy Fail" vulnerability.
Broken disclosure embargo left admins facing a fresh root-level flaw with no CVE
A new Linux zero-day exploit, named Dirty Frag, allows local attackers to gain root privileges on most major Linux distributions with a single command. [...]
Details have emerged about a new, unpatched local privilege escalation (LPE) vulnerability impacting the Linux kernel