CVE-2023-42125 is a privilege escalation vulnerability in Avast Premium Security's Sandbox Protection feature. A local attacker with low-privileged code execution can exploit this flaw by creating a symbolic link, allowing them to abuse the service to create arbitrary namespace objects and escalate privileges to SYSTEM. This vulnerability has a high CVSS score of 7.8, indicating significant impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
22.12.6044CPE matchmatch criteria | cpe:2.3:a:avast:premium_security:22.12.6044:*:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.2 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.