CVE-2024-7229

Summary

CVE-2024-7229 is a local privilege escalation vulnerability affecting Avast Cleanup Premium. Malicious actors who have already gained the ability to execute low-privileged code on a target system can exploit this flaw. The vulnerability lies within the Avast Cleanup Service, which can be manipulated by creating a symbolic link. This allows an attacker to delete a specific file, enabling them to escalate privileges and execute arbitrary code with SYSTEM-level access. (Was ZDI-CAN-22892)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.