CVE-2024-7237

Summary

CVE-2024-7237 is a local privilege escalation vulnerability affecting AVG AntiVirus Free. An attacker, who has already gained the ability to execute low-privileged code on the target system, can exploit this flaw by manipulating the AVG Service. By creating a symbolic link, an attacker can abuse the service to delete a critical folder, which in turn leads to privilege escalation. Ultimately, an attacker can execute arbitrary code with SYSTEM privileges. This vulnerability was previously identified as ZDI-CAN-22960.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.