Threats tagged 'ghsa-xpw6-9p2c-cjrx'

A vulnerability in the Avast sandbox file virtualization layer on Windows allows a local, low-privileged attacker operating inside the sandbox to write arbitrary files outside the sandbox containment. This occurs due to insufficient isolation and improper validation of write targets, enabling writes to bypass virtualization redirection and affect protected host file system locations. Exploitation can lead to overwriting executable files, system libraries, or startup configurations, resulting in code execution with host privileges upon subsequent system operations or reboot.