← CVE Intelligence

CVE-2024-13944

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp) PUBLISHED

Description (CNA)

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.

Affected (CNA)

Vendor / productVersions
Norton / Norton Utilities Ultimateaffected 0 through 24.3.17165.6812
Avast / CleanUpaffected 0 through 24.3.17165.19178
AVG / TuneUpaffected 0 through 24.3.17165.10564

CWE

CWE-367, CWE-59

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.