PPhying中文
Curated security research, vulnerabilities, advisories and tools for practitioners.

Milking the last drop of Intego - Time for Windows to get its LPE

blog.quarkslab.com | research | #vulnerability-research | #privilege-escalation | #windows-security | #windows | #vulnerability | #antivirus | #intego | #symbolic-link
📄 Raw .md⬇️ Download .md🔗 Original ↗

Summary

Quarkslab discloses a Windows LPE in Intego 3.0.0.1: the Optimization module deletes files as SYSTEM without validating directory junctions, chaining the Config.msi trick to reach SYSTEM privileges.
Published
Collected

Related coverage

research · blog.quarkslab.com
Intego X9: Never trust my updates
Part three of Quarkslab's Intego series: chaining an XPC authentication bypass in the com.intego.netupdated daemon with another flaw to reach root, highlighting weak validation in macOS XPC mechanisms.
research · blog.quarkslab.com
Avira: Deserialize, Delete and Escalate - The Proper Way to Use an AV
Quarkslab details three Avira Internet Security flaws — arbitrary file delete (CVE-2026-27748), insecure deserialization (CVE-2026-27749) and a TOCTOU folder delete — two escalate to SYSTEM.
research · blog.quarkslab.com
Intego X9: When your macOS antivirus becomes your enemy
First part of Quarkslab's Intego series: several vulnerabilities compromise all Intego applications on macOS (CVE-2026-26224, CVE-2026-26225), whether installed standalone or as a bundle.
research · github.com
Infinity Core: Linux Kernel Core Subsystems LPE and Container Escape Research
Unlike most modern Linux kernel exploits that depend on networking, eBPF, or unprivileged user namespaces, these vulnerabilities reside in fundamental kernel core subsystems, rendering standard container sandboxes and Android application domain restrictions ineffective against local privilege escalation.
research · calif.io
Dark Elevator (CVE-2026-50343)
# Dark Elevator (CVE-2026-50343) A pure-logic, 100% reliable path from a normal user to SYSTEM. Carlos Roque July 22, 2026 windowsmadbugs Contents 1. The Bugs 2. PoC 3. Disclosure Timeline > No...
High · vulnerability · blog.quarkslab.com
K7 Antivirus: Named pipe abuse, registry manipulation and privilege escalation (CVE-2025-67826)
Quarkslab's journey from install to SYSTEM on K7 Ultimate Security (CVE-2025-67826): abusing permissive named pipes and registry manipulation, plus reverse analysis of the vulnerable components.
Back