Local Privilege Escalation Vulnerability in AVG TuneUp by AVG Technologies

CVE-2024-13959

What is CVE-2024-13959?

A local privilege escalation vulnerability exists in TuneupSvc.exe within AVG TuneUp 24.2.16593.9844 for Windows. This issue permits local attackers to escalate their privileges and execute arbitrary code within the SYSTEM context. By creating a symbolic link and leveraging the service, an attacker can manipulate directory deletion, thereby gaining unauthorized access to higher-level permissions and control over the system.

References