← CVE Intelligence

CVE-2024-5803

Local privelage escalation via COM hijacking PUBLISHED

Description (CNA)

The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled.

Affected (CNA)

Vendor / productVersions
AVG/Avast / Antivirusaffected <24.1

CWE

CWE-367

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.