Threats tagged 'ghsa-8r49-5pg7-mh6x'

An improper isolation vulnerability in the Avast sandbox on Windows allows a local, low-privileged attacker running inside the sandbox to access COM interfaces of the Task Scheduler service. This access enables the attacker to escape the sandbox containment and execute code with elevated privileges on the host system. The sandbox virtualizes file system and registry access but does not restrict COM interface access to Task Scheduler, allowing arbitrary code execution outside the sandbox's intended boundaries.