Local Privilege Escalation

Title	Vulnerabilities	Programs	Authors
Unit 42 Finds Three Vulnerabilities in OpenLiteSpeed Web Server	RCE OS Command Injection Path Traversal Local Privilege Escalation	LiteSpeed	Artur Avetisyan (@3v1LMonk3y)
Exploring ZIP Mark-of-the-Web Bypass Vulnerability (CVE-2022-41049)	Local Privilege Escalation Windows	Microsoft	Kuba Gretzky (@Mrgretzky)
Partially disable Cybereason EDR as low privileges user on Windows	EDR Bypass Local Privilege Escalation	Cybereason	Mehdi Alouache
Technical Analysis of Windows CLFS Zero-Day Vulnerability CVE-2022-37969 - Part 1: Root Cause Analysis	Local Privilege Escalation Windows	Microsoft	Zscaler Threatlabz (@Threatlabz)
Abusing Windows’ tokens to compromise Active Directory without touching LSASS	Local Privilege Escalation Windows Active Directory Privilege Escalation	Undisclosed	Aurélien Chalot (@Defte_)
RC4 Is Still Considered Harmful	Kerberos MiTM Local Privilege Escalation Downgrade Attack	Microsoft (Windows)	James Forshaw (@Tiraniddo)
SiriSpy - iOS bug allowed apps to eavesdrop on your conversations with Siri	IOS MacOS Bluetooth Local Privilege Escalation TCC Bypass	Apple	Guilherme Rambo (@_Inside)
[CVE-2022-1786] A Journey To The Dawn	Use-After-Free Memory Corruption Local Privilege Escalation	Google (KCTF) Linux Kernel Organization	Kylebot (@Ky1ebot)
Another Tale Of IBM I (AS/400) Hacking	Local Privilege Escalation Midrange System Menu Security	Undisclosed	Pz
Two RCEs are better than one: write-up of an interesting lateral movement	Local Privilege Escalation RCE	Undisclosed	Riccardo Malatesta (@Seeu_inspace)
New Attack Paths? AS Requested Service Tickets	Local Privilege Escalation Windows Kerberos Active Directory	Microsoft	Charlie Clark (@Exploitph)
Microsoft Windows Shift F10 Bypass and Autopilot privilge escalation	Local Privilege Escalation	Microsoft	Matek Kamilló (@K4m1ll0)
Skype for Business Audit Part 1 - SKYPErsistence	Local Privilege Escalation Windows Security Code Review	Microsoft	Florian Hauser (@Frycos)
Exploiting a Seagate service to create a SYSTEM shell (CVE-2022-40286)	Local Privilege Escalation Windows Driver Hacking	Seagate	X86matthew (@X86matthew)
Pwn2Own Miami 2022: AVEVA Edge Arbitrary Code Execution	Arbitrary Code Execution Local Privilege Escalation	AVEVA	Daan Keuper (@Daankeuper) Thijs Alkemade (@Xnyhps)
Quasar: Compromising Electron Apps	Local Privilege Escalation	Microsoft	Taggart (@Mttaggart)
Hacking My Helium Crypto Miner	Hardcoded Credentials Missing Authentication RCE Local Privilege Escalation	Pycom	Md. Asif Hossain (@0x0asif)
Simple IBM I (AS/400) Hacking	Local Privilege Escalation Midrange System Menu Security	Undisclosed	Pz
SSD Advisory – Linux CONFIG_WATCH_QUEUE LPE	Memory Corruption Race Condition Local Privilege Escalation	Ubuntu Linux Kernel Organization	-
Azure Synapse: Local Privilege Escalation Vulnerability in Spark	Race Condition Local Privilege Escalation Cloud	Microsoft	Tzah Pahima (@TzahPahima)
SETTLERS OF NETLINK: Exploiting a limited UAF in nf_tables (CVE-2022-32250)	Memory Corruption Local Privilege Escalation	Ubuntu Linux Kernel Organization	Cedric Halbronn (@Saidelike) Alex Plaskett (@Alexjplaskett) Fidgeting Bits (@FidgetingBits)
CVE-2022-26113: FortiClient Arbitrary File Write As SYSTEM	Arbitrary File Write Local Privilege Escalation	Fortinet	David Yesland (@Daveysec)
Blind Exploits To Rule Watchguard Firewalls	XPATH Injection Memory Corruption Local Privilege Escalation RCE	WatchGuard	Charles Fol (@Cfreal_)
SSD Advisory – VhdmpiValidateVirtualDiskSurface LPE	Local Privilege Escalation	Microsoft (Windows)	Sana Oshika (@Bigshika)
Break Me Out Of Sandbox In Old Pipe - CVE-2022-22715 Windows Dirty Pipe	Local Privilege Escalation	Microsoft	K0shl (@KeyZ3r0)

Page 6 of 10