Phying News
P非影 中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Milking the last drop of Intego - Time for Windows to get its LPE

blog.quarkslab.com | research | #vulnerability-research | #privilege-escalation | #windows-security | #windows | #vulnerability | #antivirus | #intego | #symbolic-link

Summary

Quarkslab discloses a Windows LPE in Intego 3.0.0.1: the Optimization module deletes files as SYSTEM without validating directory junctions, chaining the Config.msi trick to reach SYSTEM privileges.
Published
Collected

original ↗

Related coverage

  1. CVE-2026-66804 PoC: Windows Cross Device virtual camera local privilege escalation to SYSTEM (github.com)
  2. CVE-2026-50656 PoC: Microsoft Defender RoguePlanet elevation-of-privilege patch bypass (github.com)
  3. CVE-2026-42980 PoC: Windows kernel WMI integer underflow local privilege escalation (github.com)
  4. Intego X9: Never trust my updates (blog.quarkslab.com)
  5. Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV (blog.quarkslab.com)
  6. Intego X9: When your macOS antivirus becomes your enemy (blog.quarkslab.com)

back