CVE-2024-7233

Summary

CVE-2024-7233 is a local privilege escalation vulnerability affecting Avast Free Antivirus. An attacker must initially gain the ability to execute low-privileged code on a target system to exploit this flaw. The vulnerability lies within the Avast Service, where an attacker can create a symbolic link to abuse the service and delete a crucial folder. By deleting this folder, an attacker can escalate privileges and execute arbitrary code with SYSTEM-level access. This issue was identified as ZDI-CAN-23731.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.