{"id":"CVE-2024-13944","state":"PUBLISHED","title":"Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)","description":"Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.","publishedAt":"2025-05-09T15:18:34.124Z","updatedAt":"2025-10-13T09:52:21.123Z","severity":{"score":7.8,"label":"High","version":"3.1","vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","source":"NLOK"},"assigner":"NLOK","products":["Norton Norton Utilities Ultimate","Avast CleanUp","AVG TuneUp"],"affected":[{"vendor":"Norton","product":"Norton Utilities Ultimate","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"24.3.17165.6812","versionType":"custom"}],"platforms":["Windows","64 bit"]},{"vendor":"Avast","product":"CleanUp","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"24.3.17165.19178","versionType":"custom"}],"platforms":["Windows","64 bit"]},{"vendor":"AVG","product":"TuneUp","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"24.3.17165.10564","versionType":"custom"}],"platforms":["Windows","64 bit"]}],"references":["https://www.gendigital.com/us/en/contact-us/security-advisories/"],"weaknesses":["CWE-367","CWE-59"],"ingestedAt":"2026-10-29T20:06:50.777Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2024/13xxx/CVE-2024-13944.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2024-13944","state":"PUBLISHED","datePublished":"2025-05-09T15:18:34.124Z","dateUpdated":"2025-10-13T09:52:21.123Z","assignerShortName":"NLOK","assignerOrgId":"dbd8429d-f261-4b1e-94cc-ae3132817e2e","dateReserved":"2025-05-06T10:24:53.516Z"},"containers":{"cna":{"title":"Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)","descriptions":[{"lang":"en","value":"Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack."}],"affected":[{"vendor":"Norton","product":"Norton Utilities Ultimate","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"24.3.17165.6812","versionType":"custom"}],"platforms":["Windows","64 bit"]},{"vendor":"Avast","product":"CleanUp","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"24.3.17165.19178","versionType":"custom"}],"platforms":["Windows","64 bit"]},{"vendor":"AVG","product":"TuneUp","defaultStatus":"affected","versions":[{"version":"0","status":"affected","lessThanOrEqual":"24.3.17165.10564","versionType":"custom"}],"platforms":["Windows","64 bit"]}],"references":[{"url":"https://www.gendigital.com/us/en/contact-us/security-advisories/"}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","version":"3.1"},"format":"CVSS","scenarios":[{"lang":"en","value":"GENERAL"}]}],"problemTypes":[{"descriptions":[{"cweId":"CWE-367","description":"CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition","lang":"en","type":"CWE"}]},{"descriptions":[{"cweId":"CWE-59","description":"CWE-59 Improper Link Resolution Before File Access ('Link Following')","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"NLOK","orgId":"dbd8429d-f261-4b1e-94cc-ae3132817e2e","dateUpdated":"2025-10-13T09:52:21.123Z"},"credits":[{"lang":"en","type":"finder","value":"Vladislav Berghici of Trend Micro Research"},{"lang":"en","type":"reporter","value":"Zero Day Initiative"}],"impacts":[{"capecId":"CAPEC-233","descriptions":[{"lang":"en","value":"CAPEC-233 Privilege Escalation"}]}],"solutions":[{"lang":"en","supportingMedia":[{"base64":false,"type":"text/html","value":"<p>Upgrade to the below versions, or newer, released 19/Dec/2024</p><p></p><ul><li>Norton Utilities 24.3 SU1 - 24.3.17165.6812</li><li>Avast Cleanup 24.3-SU1 - 24.3.17165.19178</li><li>AVG TuneUp 24.3-SU1 - 24.3.17165.10564</li></ul><p></p><br>"}],"value":"Upgrade to the below versions, or newer, released 19/Dec/2024\n\n\n\n  *  Norton Utilities 24.3 SU1 - 24.3.17165.6812\n  *  Avast Cleanup 24.3-SU1 - 24.3.17165.19178\n  *  AVG TuneUp 24.3-SU1 - 24.3.17165.10564"}],"source":{"discovery":"EXTERNAL"},"x_generator":{"engine":"Vulnogram 0.2.0"}},"adp":[{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-05-09T19:08:47.247841Z","id":"CVE-2024-13944","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"total"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-05-09T19:09:17.086Z"}}]}}}