CVE-2024-13944

{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2024-13944", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "state": "PUBLISHED", "assignerShortName": "NLOK", "dateReserved": "2025-05-06T10:24:53.516Z", "datePublished": "2025-05-09T15:18:34.124Z", "dateUpdated": "2025-10-13T09:52:21.123Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "affected", "platforms": ["Windows", "64 bit"], "product": "Norton Utilities Ultimate", "vendor": "Norton", "versions": [{"lessThanOrEqual": "24.3.17165.6812", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "platforms": ["Windows", "64 bit"], "product": "CleanUp", "vendor": "Avast", "versions": [{"lessThanOrEqual": "24.3.17165.19178", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "platforms": ["Windows", "64 bit"], "product": "TuneUp", "vendor": "AVG", "versions": [{"lessThanOrEqual": "24.3.17165.10564", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "Vladislav Berghici of Trend Micro Research"}, {"lang": "en", "type": "reporter", "value": "Zero Day Initiative"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.<p></p>"}], "value": "Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack."}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-367", "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition", "lang": "en", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-59", "description": "CWE-59 Improper Link Resolution Before File Access ('Link Following')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "NLOK", "dateUpdated": "2025-10-13T09:52:21.123Z"}, "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "solutions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "<p>Upgrade to the below versions, or newer, released 19/Dec/2024</p><p></p><ul><li>Norton Utilities 24.3 SU1 - 24.3.17165.6812</li><li>Avast Cleanup 24.3-SU1 - 24.3.17165.19178</li><li>AVG TuneUp 24.3-SU1 - 24.3.17165.10564</li></ul><p></p><br>"}], "value": "Upgrade to the below versions, or newer, released 19/Dec/2024\n\n\n\n * Norton Utilities 24.3 SU1 - 24.3.17165.6812\n * Avast Cleanup 24.3-SU1 - 24.3.17165.19178\n * AVG TuneUp 24.3-SU1 - 24.3.17165.10564"}], "source": {"discovery": "EXTERNAL"}, "title": "Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)", "x_generator": {"engine": "Vulnogram 0.2.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-05-09T19:08:47.247841Z", "id": "CVE-2024-13944", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-09T19:09:17.086Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2024-13944", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-05-09T19:08:47.247841Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-09T19:09:03.132Z"}}], "cna": {"title": "Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp)", "source": {"discovery": "EXTERNAL"}, "credits": [{"lang": "en", "type": "finder", "value": "Vladislav Berghici of Trend Micro Research"}, {"lang": "en", "type": "reporter", "value": "Zero Day Initiative"}], "impacts": [{"capecId": "CAPEC-233", "descriptions": [{"lang": "en", "value": "CAPEC-233 Privilege Escalation"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Norton", "product": "Norton Utilities Ultimate", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "24.3.17165.6812"}], "platforms": ["Windows", "64 bit"], "defaultStatus": "affected"}, {"vendor": "Avast", "product": "CleanUp", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "24.3.17165.19178"}], "platforms": ["Windows", "64 bit"], "defaultStatus": "affected"}, {"vendor": "AVG", "product": "TuneUp", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "24.3.17165.10564"}], "platforms": ["Windows", "64 bit"], "defaultStatus": "affected"}], "solutions": [{"lang": "en", "value": "Upgrade to the below versions, or newer, released 19/Dec/2024\n\n\n\n * Norton Utilities 24.3 SU1 - 24.3.17165.6812\n * Avast Cleanup 24.3-SU1 - 24.3.17165.19178\n * AVG TuneUp 24.3-SU1 - 24.3.17165.10564", "supportingMedia": [{"type": "text/html", "value": "<p>Upgrade to the below versions, or newer, released 19/Dec/2024</p><p></p><ul><li>Norton Utilities 24.3 SU1 - 24.3.17165.6812</li><li>Avast Cleanup 24.3-SU1 - 24.3.17165.19178</li><li>AVG TuneUp 24.3-SU1 - 24.3.17165.10564</li></ul><p></p><br>", "base64": false}]}], "references": [{"url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "x_generator": {"engine": "Vulnogram 0.2.0"}, "descriptions": [{"lang": "en", "value": "Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.", "supportingMedia": [{"type": "text/html", "value": "Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.<p></p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-367", "description": "CWE-367 Time-of-check Time-of-use (TOCTOU) Race Condition"}]}, {"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-59", "description": "CWE-59 Improper Link Resolution Before File Access ('Link Following')"}]}], "providerMetadata": {"orgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "shortName": "NLOK", "dateUpdated": "2025-10-13T09:52:21.123Z"}}}, "cveMetadata": {"cveId": "CVE-2024-13944", "state": "PUBLISHED", "dateUpdated": "2025-10-13T09:52:21.123Z", "dateReserved": "2025-05-06T10:24:53.516Z", "assignerOrgId": "dbd8429d-f261-4b1e-94cc-ae3132817e2e", "datePublished": "2025-05-09T15:18:34.124Z", "assignerShortName": "NLOK"}, "dataVersion": "5.1"}

{"affected": [{"affectedData": [{"defaultStatus": "affected", "platforms": ["Windows", "64 bit"], "product": "Norton Utilities Ultimate", "vendor": "Norton", "versions": [{"lessThanOrEqual": "24.3.17165.6812", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "platforms": ["Windows", "64 bit"], "product": "CleanUp", "vendor": "Avast", "versions": [{"lessThanOrEqual": "24.3.17165.19178", "status": "affected", "version": "0", "versionType": "custom"}]}, {"defaultStatus": "affected", "platforms": ["Windows", "64 bit"], "product": "TuneUp", "vendor": "AVG", "versions": [{"lessThanOrEqual": "24.3.17165.10564", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "security@nortonlifelock.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack."}, {"lang": "es", "value": "La vulnerabilidad de escalada de privilegios locales mediante seguimiento de enlaces en NortonUtilitiesSvc en Norton Utilities Ultimate versi\u00f3n 24.2.16862.6344 en Windows 10 Pro x64 permite a atacantes locales escalar privilegios y ejecutar c\u00f3digo arbitrario en el contexto de SYSTEM mediante la creaci\u00f3n de un enlace simb\u00f3lico y aprovechando un ataque TOCTTOU (tiempo de verificaci\u00f3n a tiempo de uso)."}], "id": "CVE-2024-13944", "lastModified": "2026-06-17T07:03:01.867", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "LOCAL", "availabilityImpact": "HIGH", "baseScore": 7.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 1.8, "impactScore": 5.9, "source": "security@nortonlifelock.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-13944", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-05-09T19:08:47.247841Z", "version": "2.0.3"}}]}, "published": "2025-05-09T16:15:23.240", "references": [{"source": "security@nortonlifelock.com", "url": "https://www.gendigital.com/us/en/contact-us/security-advisories/"}], "sourceIdentifier": "security@nortonlifelock.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-59"}, {"lang": "en", "value": "CWE-367"}], "source": "security@nortonlifelock.com", "type": "Secondary"}]}

{}

{"created": "2025-07-12T16:01:14.673043+00:00", "updated": "2025-07-12T16:01:14.673109+00:00", "vendors": ["avast", "avast$PRODUCT$cleanup"]}