Avast SecureLine VPN Privilege Escalation

The vulnerability of the Avast SecureLine VPN service is related to the absence of quotation marks in the names of elements or search paths. Exploiting this vulnerability can allow attackers to enhance their privileges and execute arbitrary code...

CVE-2020-25289

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the log directory which has weak permissions...