Local Privilege Escalation Vulnerability in Avast Free Antivirus

CVE-2024-7227

What is CVE-2024-7227?

A local privilege escalation vulnerability exists in Avast Free Antivirus, specifically affecting the Avast Service component. This vulnerability enables local attackers to exploit the service by creating a symbolic link, which can lead to the deletion of files and subsequent privilege escalation. Once an attacker has executed low-privileged code on the system, they can leverage this flaw to gain SYSTEM level privileges and execute arbitrary code, potentially compromising the entire system.

References