Privilege elevation occurs when a user, process, or app gains access beyond what its permissions or role should allow. It can be vertical, such as a standard user gaining administrator-level access, or involve crossing a boundary between apps or security contexts.
Attackers may exploit flaws in authentication, software, or access controls to elevate privileges and reach protected data or actions. In mobile systems, a broken trust check could let one app access another app’s functions or information. Defenders reduce this risk by patching affected software, enforcing least privilege, and monitoring for unexpected access or sign-in activity. Privilege elevation describes a potential capability; it does not by itself prove that an attacker successfully used it.