Attack exploiting vulnerabilities to gain higher access privileges than authorized. Vertical escalation gains admin access; horizontal accesses other users' data.