CVE-2024-9524: Privilege Escalation Vulnerability in Avira Prime Version 1.1.96.2
Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-9524?
CVE-2024-9524 is classified as a high-severity local privilege escalation vulnerability.
How do I fix CVE-2024-9524?
To remediate CVE-2024-9524, update to the latest version of Avira Prime that addresses this vulnerability.
Who is affected by CVE-2024-9524?
CVE-2024-9524 affects users of Avira Prime Version 1.1.96.2 on Windows 10 x64.
What are the consequences of exploiting CVE-2024-9524?
Exploiting CVE-2024-9524 allows local attackers to escalate privileges and execute arbitrary code in the context of the SYSTEM user.
How is CVE-2024-9524 exploited?
CVE-2024-9524 can be exploited by creating a symbolic link to manipulate file permissions and escalate privileges.