Privilege Escalation Vulnerability in Panda Security Free Antivirus

CVE-2021-34998

What is CVE-2021-34998?

A security flaw in Panda Security Free Antivirus allows local attackers to escalate their privileges by executing arbitrary code in the context of SYSTEM. The issue arises from improper handling of named pipes, specifically enabling an untrusted process to impersonate the client of a pipe. As a result, an attacker who successfully executes low-privileged code on the system can exploit this vulnerability to gain higher privileges and potentially take control of the system.

References