Local Privilege Escalation

Title	Vulnerabilities	Programs	Authors
Microsoft Windows MSI Installer - Repair to SYSTEM - A detailed journey	Local Privilege Escalation	Microsoft (Windows)	Michael Baer
3CX Phone System Local Privilege Escalation Vulnerability	Local Privilege Escalation Arbitrary File Read	3CX	Adam Crosser
KnowBe4 RCE and LPE	RCE Local Privilege Escalation DLL Hijacking	KnowBe4	Ceri Coburn
I hacked a card printer software (CVE-2024-34329)	Local Privilege Escalation DLL Hijacking Windows	Entrust	P0pcycle
Windows Installer, Exploiting Custom Actions	Local Privilege Escalation	Microsoft (Windows)	Adrian Denkiewicz
Identity Crisis: The Curious Case of a Delinea Local Privilege Escalation Vulnerability	Local Privilege Escalation DLL Search Order Hijacking	Delinea	Brenden Meeder
Firmware Security: Alcatel-Lucent ALE-DeskPhone	VoIP Hacking Hardware Hacking Reverse Engineering Arbitrary File Read TOCTOU Local Privilege Escalation	Alcatel-Lucent	Moritz Abrell (@Moritz_abrell)
WhatsUp Gold SetAdminPassword Privilege Escalation (CVE-2024-5009)	Local Privilege Escalation Security Code Review	Progress (WhatsUp Gold)	Sina Kheirkhah (@SinSinology)
Inside Xerox WorkCentre: Two Unauthenticated RCEs	RCE Local Privilege Escalation Printer Hacking Security Code Review	Xerox	Arseniy Sharoglazov (@_Mohemiv)
CVE-2024-20693: Windows cached code signature manipulation	Local Privilege Escalation	Microsoft (Windows)	Sector 7 (@Sector7_nl)
How Twitch Helper Can Be Used for Privilege Escalation	Local Privilege Escalation MacOS	Twitch	Christopher Lopez
CVE-2024-27822: macOS PackageKit Privilege Escalation	Local Privilege Escalation Reverse Engineering	Apple (MacOS)	Mykola Grymalyuk (@Khronokernel)
Abusing the SeRelabelPrivilege	Local Privilege Escalation	Undisclosed	Ap (@Decoder_it)
Cache Me If You Can: Local Privilege Escalation in Zscaler Client Connector (CVE-2023-41973)	Path Traversal Authentication Bypass Arbitrary File Delete DLL Hijacking Local Privilege Escalation Windows	Zscaler	Eugene Lim (@Spaceraccoonsec) Winston Ho
CVE-2024-21115: An Oracle Virtualbox LPE Used To Win Pwn2Own	Local Privilege Escalation Out-of-Bounds Write Memory Corruption Security Code Review	Oracle (VirtualBox)	Cody Gallagher (@Cogallag)
Poppin shells with Okta Verify on Windows	RCE DLL Hijacking Local Privilege Escalation	Okta	B0yd (@Rwincey)
Local Privilege Escalation Vulnerability in Ant Media Server (CVE-2024-32656)	Local Privilege Escalation JMX	Ant Media	Adam Crosser
CVE-2024-21111 – Local Privilege Escalation in Oracle VirtualBox	Local Privilege Escalation	Oracle (VirtualBox)	Filip Dragovic (@Filip_dragovic)
Why you shouldn't use a commercial VPN: Amateur hour with Windscribe	Local Privilege Escalation Race Condition	Windscribe	Gergely Kalman (@Gergely_kalman)
Galactical Bug Hunting: How we discovered new issues in CD Projekt Red’s Gaming Platform	Local Privilege Escalation DoS Arbitrary File Overwrite	GOG	Lautaro Fain (@LautaroFain)
macOS AUHelperService Full TCC Bypass	TCC Bypass Local Privilege Escalation	Apple (MacOS)	Mickey Jin (@Patch1t)
Local Privilege Escalation in Lenovo UDC	Local Privilege Escalation	Lenovo	Moritz Rauch
Multiple vulnerabilities in Cisco Unified Communications Manager version 11.5.1	Insecure Deserialization RCE Local Privilege Escalation	Cisco	Julien Egloff
Do not trust this Group Policy!	Local Privilege Escalation	Microsoft (Windows)	Ap (@Decoder_it)
ELECTRONizing macOS privacy	TCC Bypass Electron Local Privilege Escalation	Apple (MacOS)	Wojciech Reguła (@_R3ggi)

Page 1 of 10