Login Request a demo
AN
Product
Antivirus
by Avast · last CVE Dec 1, 2025
33
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities33In the news0Timeline
Severity mix
Critical 3High 18Medium 12Low 0
Severity
All severities33Critical3High18Medium12Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Antivirus to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2020-10864
6.5
2%
Apr 1
An issue was discovered in Avast Antivirus before 20
Affected: before 20.0
CVE-2023-1585
6.3
0%
Apr 19
Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion
Affected: 22.5 before 22.11
CVE-2019-18653
6.1
1%
Nov 1
A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Network Notification Popup,…
Affected: 19.3.2369; 19.3.2369; 19.3.2369
CVE-2024-9484
5.5
0%
Oct 4
An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application…
Affected: before 24092400
CVE-2024-9483
5.5
0%
Oct 4
A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash…
Affected: before 24092400
CVE-2024-9482
5.5
0%
Oct 4
An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application…
Affected: before 24092400
CVE-2024-9481
5.5
0%
Oct 4
An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during…
Affected: before 24092400
CVE-2020-20118
5.5
0%
Jul 11
Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver
Affected: before 19.7
CVE-2023-1587
5.5
0%
Apr 19
Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface
Affected: 22.5 before 22.11
CVE-2020-15024
5.5
0%
Sep 10
An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562
Affected: 20.1.5069.562
CVE-2023-1586
4.7
0%
Apr 19
Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation
Affected: 22.5 before 22.11
CVE-2019-11230
4.4
1%
Jul 18
In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink
Affected: before 19.4
Showing 12