AN
Product
Antivirus
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 3High 18Medium 12Low 0
Watch
Add Antivirus to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-3500 | 9.8 | Dec 1 | Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation Affected: 25.1.981.6 before 25.3 |
| CVE-2020-10867 | 9.8 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2017-8307 | 9.8 | Apr 27 | In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries, or replace or delete… Affected: through 12.3.2279 |
| CVE-2021-45337 | 8.8 | Dec 27 | Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elevated privileges by… Affected: before 20.8 |
| CVE-2021-45336 | 8.8 | Dec 27 | Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated privileges by using system IPC… Affected: before 20.4 |
| CVE-2021-45335 | 8.8 | Dec 27 | Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or… Affected: before 20.4 |
| CVE-2025-13032 | 7.8 | Nov 11 | Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow Affected: before 25.3 |
| CVE-2022-4294 | 7.8 | Jan 10 | Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to… Affected: before 22.10 |
| CVE-2021-45339 | 7.8 | Dec 27 | Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the… Affected: before 20.4 |
| CVE-2021-45338 | 7.8 | Dec 27 | Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of… Affected: before 20.4 |
| CVE-2020-10862 | 7.8 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2019-17093 | 7.8 | Oct 23 | An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8 Affected: before 19.8 |
| CVE-2025-7007 | 7.5 | Dec 1 | Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3) Affected: 16.0.0 |
| CVE-2020-10868 | 7.5 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2020-10866 | 7.5 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2020-10865 | 7.5 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2020-10863 | 7.5 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2020-10861 | 7.5 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2020-10860 | 7.5 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2017-8308 | 7.5 | Apr 27 | In Avast Antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as Trusted from the perspective of the Avast product Affected: through 12.3.2279 |
| CVE-2024-5102 | 7.0 | Jun 10 | A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run processes as NT… Affected: before 24.2 |
| CVE-2020-10864 | 6.5 | Apr 1 | An issue was discovered in Avast Antivirus before 20 Affected: before 20.0 |
| CVE-2023-1585 | 6.3 | Apr 19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion Affected: 22.5 before 22.11 |
| CVE-2019-18653 | 6.1 | Nov 1 | A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Network Notification Popup,… Affected: 19.3.2369; 19.3.2369; 19.3.2369 |
| CVE-2024-9484 | 5.5 | Oct 4 | An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application… Affected: before 24092400 |
| CVE-2024-9483 | 5.5 | Oct 4 | A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash… Affected: before 24092400 |
| CVE-2024-9482 | 5.5 | Oct 4 | An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application… Affected: before 24092400 |
| CVE-2024-9481 | 5.5 | Oct 4 | An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during… Affected: before 24092400 |
| CVE-2020-20118 | 5.5 | Jul 11 | Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver Affected: before 19.7 |
| CVE-2023-1587 | 5.5 | Apr 19 | Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface Affected: 22.5 before 22.11 |
| CVE-2020-15024 | 5.5 | Sep 10 | An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562 Affected: 20.1.5069.562 |
| CVE-2023-1586 | 4.7 | Apr 19 | Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation Affected: 22.5 before 22.11 |
| CVE-2019-11230 | 4.4 | Jul 18 | In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink Affected: before 19.4 |
Showing 33