privilege escalation vulnerability