Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2024-5803

Local privelage escalation via COM hijacking

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
NLOK

Description

The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

AVG/Avast Antivirus

Default version status: unaffected

  • <24.1affected

References