Privilege escalation
A flaw that lets someone who already has a little access, like a normal user account, take full control of a system.
Attackers rarely get full control in one step. A common pattern is to get in with limited access, through a phishing email or a stolen password, and then use a privilege escalation flaw to become an administrator.
Windows Patch Tuesday updates often fix privilege escalation flaws that are already being exploited. On their own they need a foothold first, but they're a key part of ransomware attacks.
Why it matters to you: These flaws turn one compromised laptop into a compromised business. Installing monthly Windows and Mac updates promptly closes most of them.
Related terms
- Remote code execution (RCE)A flaw that lets an attacker run their own commands on your computer or server from somewhere else, often over the internet.
- Patch TuesdayThe second Tuesday of every month, when Microsoft and several other vendors release their regular security updates.
- RansomwareMalicious software that locks up or steals a business's files and demands payment to get them back.