Gongjae

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local attacker can escalate privileges on affected installations of RealDefense SUPERAntiSpyware. To exploit this, an attacker must first have the ability to execute low-privileged code on the target system. The issue stems from an exposed dangerous function within the SAS Core Service, allowing an attacker to execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local privilege escalation issue exists in RealDefense SUPERAntiSpyware. Successful exploitation allows an attacker with low-privileged access to execute arbitrary code with SYSTEM-level privileges. The issue stems from an exposed dangerous function within the SAS Core Service. An attacker must first gain the ability to execute code on the target system to exploit this flaw. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local attacker can escalate privileges on affected systems running RealDefense SUPERAntiSpyware. The issue stems from an exposed dangerous function within the SAS Core Service, allowing an attacker to execute arbitrary code with SYSTEM-level privileges. Exploitation requires the attacker to first have the ability to execute low-privileged code on the target system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local attacker can escalate privileges on affected installations of RealDefense SUPERAntiSpyware. The attacker must first have the ability to execute low-privileged code on the target system. The issue stems from an exposed dangerous function within the SAS Core Service, allowing an attacker to execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local privilege escalation issue exists in RealDefense SUPERAntiSpyware. This allows attackers who can execute code on a system to gain higher privileges, specifically SYSTEM-level access. The issue stems from an exposed dangerous function within the SAS Core Service. An attacker must first have the ability to run code with limited privileges on the target system to exploit this. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local attacker can escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue. The flaw exists within the SAS Core Service due to an exposed dangerous `function`. Successful exploitation allows an attacker to escalate privileges and execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local attacker can escalate privileges on installations of RealDefense SUPERAntiSpyware by exploiting an exposed dangerous function within the SAS Core Service. Successful exploitation allows an attacker to execute arbitrary code with SYSTEM-level privileges, but requires initial low-privileged code execution on the target system. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local attacker can escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue. The flaw resides within the SAS Core Service due to an exposed dangerous `function`. Successful exploitation allows an attacker to execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local attacker can escalate privileges on affected installations of RealDefense SUPERAntiSpyware. An attacker must first obtain the ability to execute low-privileged code on the target system to exploit this issue. The flaw resides within the SAS Core Service due to an exposed dangerous `function`. Successful exploitation allows an attacker to escalate privileges and execute arbitrary code in the context of SYSTEM. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** RealDefense SUPERAntiSpyware (affected versions not specified) **Description** A local privilege escalation issue exists in RealDefense SUPERAntiSpyware. This allows a local attacker who has the ability to execute low-privileged code on a target system to escalate privileges. The flaw is located within the SAS Core Service and is due to an exposed dangerous function. An attacker can leverage this to execute arbitrary code with SYSTEM-level privileges. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.