AVG TuneUp Local Privilege Escalation Vulnerability in TuneupSvc.exe

A local privilege escalation vulnerability has been identified in TuneupSvc.exe of AVG TuneUp version 24.2.16593.9844 on Windows. This vulnerability allows local attackers to escalate privileges and execute arbitrary code with SYSTEM rights. The issue arises from the ability to create a symbolic link that the service follows, enabling the deletion of a directory and exploitation of the privilege escalation.

Impact

Exploitation of this vulnerability allows for local privilege escalation, with the potential to execute arbitrary code in the context of the SYSTEM user.