CVE-2023-42124: (0Day) Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability
Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avast Premium Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
The specific flaw exists within the implementation of the sandbox feature. The issue results from incorrect authorization. An attacker can leverage this vulnerability to escalate privileges and execute arbitrary code outside the sandbox at medium integrity. . Was ZDI-CAN-20178.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2023-42124?
CVE-2023-42124 has a medium severity rating due to its potential for privilege escalation.
How do I fix CVE-2023-42124?
To mitigate CVE-2023-42124, update your Avast Premium Security to the latest version provided by the vendor.
Who is affected by CVE-2023-42124?
CVE-2023-42124 affects installations of Avast Premium Security on local systems.
What type of attack does CVE-2023-42124 enable?
CVE-2023-42124 enables a local attacker to escalate privileges on the affected systems.
What must an attacker do to exploit CVE-2023-42124?
An attacker must first gain the ability to execute low-privileged processes on the system to exploit CVE-2023-42124.