CVE-2024-13962

CVE-2024-13962 affects Avast Cleanup Premium (Gen Digital) using TuneupSvc on Windows 10 Pro x64. A local privilege escalation exists via creating a symbolic link and TOCTTOU timing, enabling an attacker with low privileges to escalate to SYSTEM and potentially execute arbitrary code. Affected ve...

PT-2025-20564 · Avast · Avast Cleanup Premium

Name of the Vulnerable Software and Affected Versions: Avast Cleanup Premium version 24.2.16593.17810 Description: The issue allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and leveraging a time-of-check to time-of-use...