CVE-2024-1867

CVE-2024-1867 is a local privilege escalation vulnerability affecting G DATA Total Security, specifically within its Backup Service. An attacker with low-privileged code execution can exploit this flaw by creating a symbolic link, enabling them to delete arbitrary files and subsequently execute code with SYSTEM privileges. The vulnerability carries a high CVSS score of 7.8 due to its local attack vector, low attack complexity, and high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.