Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability

CVE-2023-42125

What is CVE-2023-42125?

A privilege escalation vulnerability exists in the Avast Premium Security Sandbox Protection, where local attackers can exploit a flaw in the implementation of the sandbox feature. By creating a symbolic link, attackers can manipulate the service to generate arbitrary namespace objects. This exploitation allows individuals with low-privileged access to escalate their privileges and execute arbitrary code in the context of the SYSTEM user, posing significant risks to system integrity and security.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References