Local Privilege Escalation Vulnerability in Avast Free Antivirus
CVE-2024-7227
7.8HIGH
What is CVE-2024-7227?
A local privilege escalation vulnerability exists in Avast Free Antivirus, specifically affecting the Avast Service component. This vulnerability enables local attackers to exploit the service by creating a symbolic link, which can lead to the deletion of files and subsequent privilege escalation. Once an attacker has executed low-privileged code on the system, they can leverage this flaw to gain SYSTEM level privileges and execute arbitrary code, potentially compromising the entire system.
References
CVSS V3.1
Score:
7.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged
Timeline
Vulnerability published