Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability

A local privilege escalation vulnerability has been identified in the TuneupSvc component of Avast Cleanup Premium, specifically in version 24.2.16593.17810, on Windows 10 Pro x64. This vulnerability allows local attackers to escalate privileges and execute arbitrary code with SYSTEM rights by creating a symbolic link and exploiting a time-of-check to time-of-use (TOCTTOU) race condition.

Impact

Exploitation of this vulnerability could lead to unauthorized privilege escalation, allowing attackers to execute arbitrary code in the context of the SYSTEM user.