Race condition in Unzip 5.52 allows local users to modify permissions of arbitrary files via a hard link attack on a file while it is being decompressed, whose permissions are changed by Unzip after the decompression is complete.
Exploitability
AV:LAC:HAu:NImpact
C:PI:NA:N1.2/AV:L/AC:H/Au:N/C:P/I:N/A:N