Local Privilege Escalation in VIPRE Advanced Security by Threat Actor

CVE-2024-7238

What is CVE-2024-7238?

This vulnerability pertains to VIPRE Advanced Security and involves the Anti Malware Service, which is susceptible to a local privilege escalation attack. Attackers who possess access to run low-privileged code can create a symbolic link to manipulate the service, potentially allowing them to delete important files. This exploitation can lead to privilege escalation, where an attacker gains the ability to execute arbitrary code with SYSTEM-level privileges, thereby compromising the system's security integrity.

References