Privilege escalation

Gaining higher permissions than an attacker started with, for example going from a normal user to local administrator, root or domain admin, usually through a vulnerability, a misconfiguration or exposed admin credentials. Privilege escalation bugs are often chained after initial access, so do not deprioritize them just because they cannot be triggered remotely, and keep everyday work off administrator accounts.

Further reading: attack.mitre.org

All terms