CVE-2024-7230

Summary

CVE-2024-7230 is a local privilege escalation vulnerability affecting Avast Cleanup Premium. An attacker must initially gain the ability to execute low-privileged code on the target system to exploit this flaw. The vulnerability resides in the Avast Cleanup Service, where an attacker can create a symbolic link to manipulate the service and delete a file. This action enables the attacker to escalate privileges and execute arbitrary code with SYSTEM-level access. This vulnerability was discovered and reported as ZDI-CAN-22893.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.