CVE-2024-7240

CVE-2024-7240 is a local privilege escalation vulnerability affecting F-Secure Total, residing within the WithSecure plugin hosting service. An attacker can exploit this flaw by creating a symbolic link, allowing them to abuse the service to create a file and subsequently execute arbitrary code with SYSTEM privileges. This vulnerability has a CVSS score of 7.8 (HIGH), requiring user interaction from an administrator for successful exploitation. While no public exploit code or active exploitation has been observed, and community discussion is minimal, the potential impact of a successful attack is significant due to the SYSTEM-level privilege escalation.