ZDI-CAN-25509: ZDI-25-695: AVG TuneUp for PC TuneupSvc Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of AVG TuneUp for PC. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.8. The following CVEs are assigned: CVE-2024-13944.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-25509?
The CVSS rating for ZDI-CAN-25509 is assigned by ZDI indicating a significant security risk associated with privilege escalation.
How do I fix ZDI-CAN-25509?
To fix ZDI-CAN-25509, update AVG TuneUp for PC to the latest version provided by the vendor.
Who is affected by ZDI-CAN-25509?
ZDI-CAN-25509 affects installations of AVG TuneUp for PC on systems where low-privileged code can be executed.
What type of vulnerability is ZDI-CAN-25509?
ZDI-CAN-25509 is a privilege escalation vulnerability that allows local attackers to gain elevated permissions.
What must an attacker do to exploit ZDI-CAN-25509?
An attacker must first obtain the capability to execute low-privileged code on the affected system to exploit ZDI-CAN-25509.