Ethical Hacking News
Chaotic Eclipse has released a new zero-day exploit, PrettyPrague, targeting GenDigital Avast Antivirus. The exploit triggers a privilege escalation flaw in Avast Sandbox, allowing an attacker to dump the Windows SAM database and gain a SYSTEM-level shell. This release follows Chaotic Eclipse's previous exploits, which have targeted Microsoft products and vendors. The impact of PrettyPrague goes beyond the GenDigital Avast Antivirus, as it may affect other GenDigital products. The exploit's potential reach and ease of execution have raised concerns about the security of Avast Antivirus and other GenDigital products.
Chaotic Eclipse has released a new zero-day exploit, PrettyPrague, targeting GenDigital Avast Antivirus. The exploit triggers a privilege escalation flaw, allowing an attacker to dump the Windows SAM database and gain a SYSTEM-level shell. The exploit works even on fully patched Avast Antivirus and Windows 11 25H2, raising significant concerns. The release of PrettyPrague follows Chaotic Eclipse's previous exploits targeting Microsoft products and vendors. The exploit may affect other GenDigital products, including AVG and Norton. The cycle of vulnerability disclosure and patching is essential for maintaining the security of the digital landscape.
Chaotic Eclipse, a renowned security researcher, has released a new zero-day exploit targeting GenDigital Avast Antivirus. The exploit, named PrettyPrague, triggers a privilege escalation flaw in Avast Sandbox, allowing an attacker to dump the Windows SAM database and gain a SYSTEM-level shell. This exploit has significant implications, as it reportedly works even on fully patched Avast Antivirus and Windows 11 25H2.
The release of PrettyPrague follows Chaotic Eclipse's previous exploits, which have targeted Microsoft products and vendors. His work has sparked debate over responsible disclosure and the risks of publishing working exploits. Chaotic Eclipse has gained notoriety for publicly releasing PoC exploits for zero-day vulnerabilities, often after criticizing vendors' handling of vulnerability reports.
The impact of PrettyPrague goes beyond the GenDigital Avast Antivirus, as it may affect other GenDigital products, including AVG and Norton. The PoC exploit is compatible with any version of Avast Antivirus, making it a significant concern for users and administrators alike. The exploit's potential reach and the ease with which it can be executed have raised concerns about the security of Avast Antivirus and other GenDigital products.
Furthermore, the release of PrettyPrague highlights the ongoing cat-and-mouse game between security researchers and vendors. As security researchers continue to discover and release exploits, vendors must respond with patches and updates to protect their products and customers. This cycle of vulnerability disclosure and patching is essential for maintaining the security of the digital landscape.
In recent months, Chaotic Eclipse has released several exploits targeting various vendors and products. These releases have included PoC exploits for zero-day vulnerabilities in Microsoft products, including Windows and Microsoft Defender. Some of these exploits have been exploited in the wild, further highlighting the need for vendors to respond quickly to vulnerability reports.
The release of PrettyPrague marks another milestone in Chaotic Eclipse's career as a security researcher. His work has sparked debate over responsible disclosure and the risks of publishing working exploits. While his releases have raised concerns, they also highlight the importance of security researchers in identifying and releasing vulnerabilities.
In conclusion, the release of PrettyPrague by Chaotic Eclipse is a significant development in the world of security. The exploit's potential reach and ease of execution have raised concerns about the security of Avast Antivirus and other GenDigital products. As security researchers continue to discover and release exploits, vendors must respond with patches and updates to protect their products and customers.
Related Information:
https://www.ethicalhackingnews.com/articles/CHAOTIC-ECLIPSE-RELEASES-GENDIGITAL-AVAST-ANTIVIRUS-ZERO-DAY-PRETTYPRAGUE-A-NEW-ZERODAY-EXPLOIT-FOR-GENDIGITAL-ANTIVIRUS-ehn.shtml
https://securityaffairs.com/198243/hacking/chaotic-eclipse-releases-gendigital-avast-antivirus-zeroday-prettyprague.html
Published: Tue Sep 1 10:43:53 2026 by llama3.2 3B Q4_K_M
