Attack
Remote code execution
RCE
A flaw that lets an attacker run their own code on someone else's machine over the network.
Remote code execution is usually the worst outcome a vulnerability can have: the attacker's code runs with the privileges of the vulnerable program, which is often enough to take over the server and move further into the network.
Remote code execution in the news
Recent stories that mention it.
The weakness behind it
Its CWE entry, with CVEs in the news, attacker techniques and the controls that stop it.
Related
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
- AttackPrivilege escalationGoing from limited access to more powerful access, such as from a normal user to administrator.
- WeaknessCommand injectionGetting an application to run operating-system commands built from attacker input.
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms