CVE-2024-13944
Last modified
CVE-2024-13944 is a high-severity vulnerability rated 7.8/10 on the CVSS scale. Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.. EPSS estimates a 0.14% chance of exploitation in the next 30 days.
Description
Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.
Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2024-13944?
How severe is CVE-2024-13944?
How do I fix CVE-2024-13944?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2024
- CVE-2024-13933The FoodBakery | Delivery Restaurant Directory WordPress The…8.8
- CVE-2024-13939String::Compare::ConstantTime for Perl through 0.321 is vuln…7.5
- CVE-2024-1394A memory leak flaw was found in Golang in the RSA encrypting…7.5
- CVE-2024-13940The Ninja Forms Webhooks plugin for WordPress is vulnerable …5.5
- CVE-2024-13941A vulnerability was found in ouch-org ouch up to 0.3.1. It h…5.3
- CVE-2024-13943Tesla Model S Iris Modem QCMAP_ConnectionManager Improper In…7.8
- CVE-2024-13945Stored Absolute Path Traversal vulnerabilities in ASPECT cou…8.4
- CVE-2024-13946DLL's are not digitally signed when loaded in ASPECT's confi…7.1
- CVE-2024-13947Device commissioning parameters in ASPECT may be modified by…7.1
- CVE-2024-13948Windows permissions for ASPECT configuration toolsets are no…7.3
- CVE-2024-13949Large content vulnerabilities are present in ASPECT exposing…6.9
- CVE-2024-1395Use After Free vulnerability in Arm Ltd Arm 5th Gen GPU Arch…6.7
Are you affected by CVE-2024-13944?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST