Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability

CVE-2023-42125

What is CVE-2023-42125?

A privilege escalation vulnerability exists in the Avast Premium Security Sandbox Protection, where local attackers can exploit a flaw in the implementation of the sandbox feature. By creating a symbolic link, attackers can manipulate the service to generate arbitrary namespace objects. This exploitation allows individuals with low-privileged access to escalate their privileges and execute arbitrary code in the context of the SYSTEM user, posing significant risks to system integrity and security.

References