Medium severity · published May 20, 2022
CVE-2022-28965
Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or…
6.5
CVSS
0.3%
EPSS
No
On KEV
Description
Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted DLL file.
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:H
Attack vector
Local
Complexity
Low
Privileges
High
User interaction
Required
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 22% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PS
Premium Security · Avast
before 21.11.2500 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-28965
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-28965
Patch
https://forum.avast.com/index.php?topic=318305.0
Third Party Advisory
https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2022-AVAST2
More from Premium Security
7.8
CVE-2023-42125
Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability
7.8
CVE-2023-42124
Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability
7.8
CVE-2019-18894
In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port 27275 to support Bank Mode functionality
7.1
CVE-2022-28964
An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) via a crafted DLL…
6.1
CVE-2021-27241
This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.5653.561)