CVE-2026-107707

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107707 Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

EUVD-2026-95210

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107707 Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

CVE-2026-107707

Intego Antivirus for Windows through version 3.0.0.1 is vulnerable to Local Privilege Escalation due to a link following vulnerability in its optimization module. An unprivileged local user can delete arbitrary folders as SYSTEM by replacing a scanned duplicate file's directory with a junction to...

PT-2026-108197

Name of the Vulnerable Software and Affected Versions Intego Antivirus for Windows versions prior to 3.0.0.1 Description A link following issue exists in the optimization module. This allows local unprivileged users to delete arbitrary folders with SYSTEM privileges. An attacker can replace the...

CVE-2026-107707: Improper Link Resolution Before File Access

Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows...

Intego Antivirus’ backend link vulnerability

Intego Antivirus for Windows versions 3.0.0.1 and earlier have a post-release link vulnerability. This vulnerability stems from a link-following vulnerability in the optimization module. Attackers can replace the scanned duplicate file directories with junctions pointing to C:\Config.msi, and...

PT-2012-3817

Name of the Vulnerable Software and Affected Versions Gigya - Social optimization module versions prior to 6.x-3.2 Description The issue is related to a cross-site scripting XSS vulnerability, which allows remote attackers to inject arbitrary web script or HTML. This can be achieved via unspecifi...