ZDI 2026-07-08

ZDI-26-402: (0Day) Glarysoft Glary Utilities Link Following Local Privilege Escalation Vulnerability

Machine-generated analysis · WAYSCloud LLM

The vulnerability involves link following in Glary Utilities that can lead to local privilege escalation.

Context

Glarysoft Glary Utilities is affected by a local privilege escalation vulnerability. The issue arises from link following, which can be exploited by a local attacker who already has the ability to execute low-privileged code. The advisory notes that the vulnerability is currently 0Day. Worth noting is the CVSS score of 7.3, indicating a medium to high severity impact.

Operator considerations

Check: Verify if Glarysoft Glary Utilities is installed on the system.

From Zero Day Initiative ↗

This vulnerability allows local attackers to escalate privileges on affected installations of Glarysoft Glary Utilities. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The ZDI has assigned a CVSS rating of 7.3.

Read the full advisory on ZDI →