Avast

Records84All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high47CVSS 7.0–8.9

Exploited now

Avast records in CISA KEV

No Avast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Antivirus 32 records MEDIUM Avast Antivirus Home 8 records MEDIUM Avast Antivirus Professional 8 records MEDIUM Free Antivirus 8 records LOW Avast Antivirus 6 records MEDIUM Premium Security 6 records LOW Avg Antivirus 3 records LOW Cleanup Premium 3 records LOW

Records

8 records in Free Antivirus · all components

TI-2024-06698 CVE-2024-7233 · GHSA-3mqp-f6x6-jj6x

Link following in Avast Free Antivirus

LOW 36

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00385 Published 2024-11-22 No fix listed CWE-59

TI-2024-06697 CVE-2024-7232 · GHSA-6jhm-j4gf-hvjx

Link following in Avast Free Antivirus

LOW 36

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00385 Published 2024-11-22 No fix listed CWE-59

TI-2024-06692 CVE-2024-7227 · GHSA-xv64-q73j-cvqp

Link following in Avast Free Antivirus

LOW 36

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00351 Published 2024-11-22 No fix listed CWE-59

TI-2018-09022 CVE-2018-12572 · GHSA-mxrp-w3c8-g53w

Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login…

LOW 34

Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dumping AvastUI.exe application memory and parsing the data.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00314 Published 2019-03-17 No fix listed CWE-312

TI-2017-03573 CVE-2017-5567 · GHSA-jp94-65m5-f9mg

Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3…

LOW 30

Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free Antivirus 12.3 (and earlier) allows a local attacker to bypass a self-pro…

CVSS 3.0MEDIUM 6.7 Local High privileges No interaction EPSS 0.00534 Published 2017-03-21 No fix listed CWE-427

TI-2024-06693 CVE-2024-7228 · GHSA-3hqr-6848-jx5j

Link following in Avast Free Antivirus

LOW 25

Avast Free Antivirus Link Following Denial-of-Service Vulnerability.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00306 Published 2024-11-22 No fix listed CWE-59

TI-2020-10717 CVE-2020-13657 · GHSA-p9cq-92f2-wgq6

An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus…

LOW 25

An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00412 Published 2020-06-29 No fix listed

TI-2016-03421 CVE-2016-4025 · GHSA-r6c6-fj9g-rcxw

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus…

LOW 25

Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.x, Endpoint Protection Plus v8.x.x, Endpoint Protection Suite v8.x.x, E…

CVSS 3.0MEDIUM 5.5 Local Low privileges No interaction EPSS 0.004 Published 2016-11-03 No fix listed CWE-254

Open these records in search →