Editing Privilege escalation (section)

==Background==
Most computer systems are designed for use with multiple user accounts, each of which has abilities known as [[Privilege (computing)|privileges]]. Common privileges include viewing and editing files or modifying system files.

Privilege escalation means users receive privileges they are not entitled to. These privileges can be used to delete files, view [[personal data|private information]], or install unwanted programs such as viruses. It usually occurs when a system has a [[software bug|bug]] that allows security to be bypassed or, alternatively, has flawed design assumptions about how it will be used.  Privilege escalation occurs in two forms:

* '''Vertical privilege escalation''', also known as ''privilege elevation'', where a lower privilege user or application accesses functions or content reserved for higher privilege users or applications (e.g. Internet Banking users can access site administrative functions or the password for a smartphone can be bypassed).
* '''Horizontal privilege escalation''', where a normal user accesses functions or content reserved for other normal users (e.g. Internet Banking User A accesses the Internet bank account of User B).