Tag
high
advisory
Amazon WorkSpaces Skylight: Local privilege escalation (CVE-2026-7791)
1 rule 1 TTP 1 CVEA local privilege escalation vulnerability in the Amazon WorkSpaces Skylight Workspace Config Service allows low-privileged users to achieve arbitrary file writes as SYSTEM via a TOCTOU race condition during log rotation.
WorkSpaces Skylight
privilege-escalation
windows
windows-service
aws
1r
1t
1c
high
advisory
Windows Service Installed via an Unusual Client for Privilege Escalation
2 rules 1 TTPIdentifies the creation of a Windows service by an unusual client process, which can be leveraged to escalate privileges from administrator to SYSTEM by exploiting misconfigurations or vulnerabilities in the service creation process.
VeeamVssSupport +6
privilege-escalation
windows-service
windows
2r
1t