pentester.land· May 15, 2023· by Denis Skvortcov (@Denis_Skvortcov)🔍 CVE-2023-1586

Avast Anti-Virus privileged arbitrary file create on virus restore (CVE-2023-1586)

Open Original Article ↗
Target Program: Avast, NortonLifeLock
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#TOCTOU#Arbitrary file write#Local Privilege Escalation#CVE-2023-1586