Local Privilege Escalation (LPE) Vulnerability in Avast Antivirus

Local Privilege Escalation (LPE) Vulnerability in Avast Antivirus

CVE-2020-10862 · HIGH Severity

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attackers to achieve Local Privilege Escalation (LPE) via RPC.

Learn more about our Web Application Penetration Testing UK.