[CVE-2014-6324] Vulnerability in Kerberos Allows Elevation of Privilege

This post focuses on obtaining domain administrative privileges from a local administrator or domain user account. Once the initial steps have been taken to obtain local administrative access on a Windows operating system, the natural next steps are to gain domain user and domain administrative privileges.

Resource-based constrained delegation (RBCD) lets admins delegate access per resource via msDS-AllowedToActOnBehalfOfOtherIdentity, reducing privilege risk—but misconfiguration can be abused.

An unauthenticated stored XSS (CVE-2026-93485) in WordPress core's wpautop() turns crafted comments into zero-click XSS, escalating to RCE via the admin session. Fixed in 7.1.1, backported to 4.7.36.

A Google Project Zero blog post examining a Windows privilege escalation technique involving dangling COM object registrations, which Microsoft addressed in a recent security update.

The official CVSS 3.1 vector requires local low-privilege access, but attack complexity is low, no user interaction is required, and successful exploitation can fully impact confidentiality, integrity, and availability. Apply the latest Microsoft security update for each Windows release; also enforce SMB signing, restrict NTLM, and monitor for unusual local SMB relay activity. Public information currently confirms a PoC, not active exploitation in the wild.

Write-up of CVE-2025-38236, a Linux kernel bug reachable from a compromised Chrome renderer via MSG_OOB socket handling, escalating renderer code execution into kernel privileges.