CVE-2024-13959 — Link Following Local Privilege Escalation Vulnerability in AVG TuneUp 24.2.16593.9844

CVE-2024-13959

Link Following Local Privilege Escalation Vulnerability in AVG TuneUp 24.2.16593.9844 PUBLISHED

Description (CNA)

Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging the service to delete a directory

Affected (CNA)

Vendor / product	Versions
AVG / TuneUp	affected 24.2.16593.9844; unaffected 24.3.17165.10564

CWE

CWE-59

References

https://www.gendigital.com/us/en/contact-us/security-advisories/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.