Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Local privelage escalation via COM hijacking
Vulnerability Description
The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:C/C:H/I:H/A:H
Vulnerability Type
检查时间与使用时间(TOCTOU)的竞争条件
Vulnerability Title
Avast Antivirus 安全漏洞
Vulnerability Description
Avast Antivirus是捷克Avast公司的一套杀毒软件。 Avast Antivirus 24.1之前版本存在安全漏洞，该漏洞源于当自我保护被禁用时，通过COM劫持在检查时间到使用时间的过程中，可能允许本地攻击者提升权限。
CVSS Information
N/A
Vulnerability Type
N/A