Local privilege escalation via trusted process hollowing

Privilege escalation in Avast Antivirus before 20.4 allows local users to gain elevated privileges by hollowing a trusted process. Avast self-defense continues to trust the hollowed process after its executable image is replaced with attacker-controlled code. Local code execution is required, and successful exploitation bypasses self-defense and runs attacker-controlled code with the trusted process's elevated privileges.