Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-13944

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NLOK

Description

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Norton Norton Utilities Ultimate

Default version status: affected

  • 0 to ≤ 24.3.17165.6812affected

Avast CleanUp

Default version status: affected

  • 0 to ≤ 24.3.17165.19178affected

AVG TuneUp

Default version status: affected

  • 0 to ≤ 24.3.17165.10564affected

References