Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Link Following Local Privilege Escalation Vulnerability in AVG TuneUp Version 23.4
Vulnerability Description
Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Vulnerability Title
Gen Digital AVG TuneUp 安全漏洞
Vulnerability Description
Gen Digital AVG TuneUp是美国Gen Digital公司的一个专业PC优化工具，提供系统清理、性能加速和自动化维护功能。 Gen Digital AVG TuneUp 23.4版本存在安全漏洞，该漏洞源于TuneUp Service存在符号链接处理不当，可能导致权限提升。
CVSS Information
N/A
Vulnerability Type
N/A