CVE-2024-7234

Summary

CVE-2024-7234 is a local privilege escalation vulnerability affecting AVG AntiVirus Free. An attacker needs initial low-privilege access to the system to exploit this issue. The flaw lies within the AVG Service, which can be manipulated through symbolic link creation. By deleting a specific file using this technique, an attacker can escalate privileges and gain the ability to execute arbitrary code with SYSTEM-level permissions. (Was ZDI-CAN-22260)

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.