Back to Database
Status published
High
CVE-2023-7241
Webroot Antivirus COM-Hijacking LPE
Vulnerability Description
Privilege Escalation in WRSA.EXE in Webroot Antivirus 8.0.1X- 9.0.35.12 on Windows64 bit and 32 bit allows malicious software to abuse WRSA.EXE to delete arbitrary and protected files.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-7241
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Kolja Grassmann (cirosec GmbH) and Alain Rödel (Neodyme)
References
More from Webroot
View All →CVE-2024-7826
Unhandled exception vulnerability that can cause the WRSA.exe service to crash and generate a crash dump
Medium
6.2
CVE-2024-7825
Type confusion that can cause the WRSA.exe service to crash and generate a crash dump
Medium
6.2
CVE-2024-7824
Type-confusion vulnerability that can cause the WRSA.exe service to crash and generate a crash dump
Medium
6.3
CVE-2021-40425
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and...
High
7.1
CVE-2021-40424
An out-of-bounds read vulnerability exists in the IOCTL GetProcessCommand and...
High
7.1
Affected Vendor
Webroot
View all reports →Affected Software
Webroot AntiVirus (Consumer) and Webroot Endpoint Protection (Business)
Vulnerable Versions:
8.0.1
Timeline
Official Publish:
May 1st, 2024
Last Modified:
August 2nd, 2024
Added to House:
July 22nd, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:H