CVE-2024-7238

Summary

CVE-2024-7238 is a local privilege escalation vulnerability affecting VIPRE Advanced Security. This issue lies in the Anti Malware Service, where an attacker can create a symbolic link to manipulate the service and delete a file. To exploit this vulnerability, an attacker must initially gain the ability to execute low-privileged code on the target system. Successful exploitation allows the attacker to escalate privileges and run arbitrary code in the SYSTEM context. This flaw was identified as ZDI-CAN-22238.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.