Read the docs
TI-2024-12956 Aliases CVE-2024-13944GHSA-57f7-wfqr-87r7

Time-of-check time-of-use race condition in Norton Utilities Ultimate

Priority LOW 35CWE-367Published · Updated

Key facts

Attack vector
Local
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via the creation of a symbolic link and leveraging a TOCTTOU (time-of-check to time-of-use) attack.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00167 5th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
NortonNorton Utilities Ultimateup to 24.3.17165.6812—No fix listedCNA
AvastCleanUpup to 24.3.17165.19178—No fix listedCNA
AVGTuneUpup to 24.3.17165.10564—No fix listedCNA
  • Norton Utilities Ultimate VendorNorton Affected up to 24.3.17165.6812 Fixed in — No fix listed CNA
  • CleanUp VendorAvast Affected up to 24.3.17165.19178 Fixed in — No fix listed CNA
  • TuneUp VendorAVG Affected up to 24.3.17165.10564 Fixed in — No fix listed CNA

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-13944
  2. 2026-10-03 Alias added: GHSA-57f7-wfqr-87r7

References

Other 1

  • TI-2019-14090 Norton Power Eraser, prior to 5.3.0.67, may be susceptible to a privilege escalation… CVSS 3.1HIGH 7.8
  • TI-2022-03932 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation CVSS 3.1HIGH 7.8
  • TI-2019-07094 Norton Core prior to v278 may be susceptible to an arbitrary code execution issue, which… CVSS 3.0MEDIUM 6.8
  • TI-2017-09954 Code injection in Symantec Norton Remove & Reinstall CVSS 3.0HIGH 7.0
  • TI-2019-14088 Norton Password Manager, prior to 6.6.2.5, may be susceptible to an information… CVSS 3.1MEDIUM 6.5
  • TI-2019-14087 Origin validation error in Norton Password Manager CVSS 3.1MEDIUM 6.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences