CVE-2026-107707 — Intego Antivirus through 3.0.0.1 Local Privilege Escalation via Optimization Module Junction
Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders …
Published: 2026-10-08 · CVSS: 8.5 · CVSS 4.0
Intego Antivirus for Windows through 3.0.0.1 contains a link following vulnerability in its optimization module that allows local unprivileged users to delete arbitrary folders as SYSTEM. Attackers can replace a scanned duplicate file's directory with a junction to C:\Config.msi and abuse Windows Installer rollback to execute code as SYSTEM.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7