This runs as SYSTEM, which is the highest privilege set in Windows. Yes, a vulne... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

giantDinosaur on March 11, 2020 | parent | context | favorite | on: AvastSvc.exe contains a full, unsandboxed JavaScri...

This runs as SYSTEM, which is the highest privilege set in Windows. Yes, a vulnerability will result in absolutely everything you asked about.

jaclaz on March 11, 2020 [–]

To be picky, not the highest privilege, System is prevented from doing things that TrestedInstaller can do.

Hence the existence of a number of Windows tools to get TrustedInstaller privileges, some examples listed in this thread:

https://msfn.org/board/topic/181190-how-to-overwrite-dll-fil...

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact