Elevation of Privelege

Elevation of Privilege is when a program or user is technically able to do things that they’re not supposed to do. These threats are almost always going to fall into the highest priority category, because when they’re exploited they lead to so much damage. Denial of service violates authorisation.

Typical victims include processes.

Example Threats

• Data/code confusion;
• control flow/memory corruption attacks;
• command injection attacks.