High severity · published Dec 6, 2022
CVE-2022-4173
A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain…
8.8
CVSS
0.7%
EPSS
No
On KEV
Description
A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AV
Avast · Avast
20.5 through 22.9 · source: NVD
AA
Avg Antivirus · Avast
20.5 through 22.9 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-4173
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-4173
Third Party Advisory
https://support.norton.com/sp/static/external/tools/security-advisories.html
More from Avast
7.8
CVE-2016-3986
Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to authenticode parsing