EUVD-2026-43541

🗓️ 14 Jul 2026 00:31:01Reported by EUVDType

Local privilege escalation in Glary Utilities via junctions to delete files and run as SYSTEM.

Reporter	Title	Published	Views	Family All 5
ATTACKERKB	CVE-2026-15684	13 Jul 202621:30	–	attackerkb
CVE	CVE-2026-15684	13 Jul 202621:30	–	cve
Cvelist	CVE-2026-15684 Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability	13 Jul 202621:30	–	cvelist
NVD	CVE-2026-15684	13 Jul 202622:16	–	nvd
Positive Technologies	PT-2026-57873	13 Jul 202600:00	–	ptsecurity

[
  {
    "enisaIdVendor": [
      {
        "id": "17ebd834-9e62-3777-9922-b1babccf04cc",
        "vendor": {
          "name": "Glarysoft"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "8ffdb2a2-bc2b-3975-990f-29b7f701e2f4",
        "product": {
          "name": "Glary Utilities",
          "vendor": {
            "name": "Glarysoft"
          }
        },
        "product_version": "6.24.0.28"
      }
    ]
  }
]

Source	Link
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-26-402/
nvd	www.nvd.nist.gov/vuln/detail/CVE-2026-15684

14 Jul 2026 00:31Current

7.2High risk

Vulners AI Score7.2

CVSS 37.3