CVE-2023-42126

CVE-2023-42126 is a local privilege escalation vulnerability affecting G Data Total Security, specifically within the GDBackupSvc service. An attacker with low-privileged code execution can exploit this flaw by creating a symbolic link, leading to the creation of a file with a permissive DACL. This allows the attacker to escalate privileges and execute arbitrary code with SYSTEM-level access. The vulnerability has a CVSS score of 7.8 (High), indicating a significant impact on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this CVE.