AVG AntiVirus Free AVGSvc Link Following Local Privilege Escalation Vulnerability

CVE-2024-7234

What is CVE-2024-7234?

A local privilege escalation vulnerability exists in AVG AntiVirus Free that allows attackers to gain elevated access rights. This flaw is due to inadequate validation in the AVG Service, which can be exploited by creating symbolic links. Attackers with low-privileged access on the target system can leverage this vulnerability to delete critical files and execute arbitrary code with high privileges, compromising system security. Effective remediation requires patching the affected versions of AVG AntiVirus Free to mitigate this vulnerability.

References