Directory Deletion Vulnerability in Avast Premium Security by Avast

CVE-2021-27241

What is CVE-2021-27241?

This vulnerability in Avast Premium Security enables local attackers to delete arbitrary directories by leveraging the AvastSvc.exe module. Once low-privileged code execution is achieved on the target system, an attacker can create a directory junction to exploit this flaw. This may lead to a denial-of-service condition, effectively interrupting operations on affected installations.

References