Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2024-13962

Link Following Local Privilege Escalation Vulnerability in Avast Cleanup Premium Version 24.2.16593.17810

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NLOK

Description

Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Avast CleanUp Premium

Default version status: unaffected

  • 24.2.16593.17810affected
  • 24.3.17165.19178unaffected

References