CVE-2024-7232

Summary

CVE-2024-7232 is a local privilege escalation vulnerability affecting Avast Free Antivirus. This issue enables attackers to escalate privileges by exploiting a flaw in the Avast Service. By creating a symbolic link, an attacker can manipulate the service to delete a critical folder. For an attack to be successful, the adversary must initially gain the ability to execute low-privileged code on the target system. Ultimately, this vulnerability, identified as ZDI-CAN-22963, allows attackers to execute arbitrary code in the context of the SYSTEM account.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.