Avast

Records84All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical9CVSS 9.0–10.0

CVSS high47CVSS 7.0–8.9

Exploited now

Avast records in CISA KEV

No Avast vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Antivirus 32 records MEDIUM Avast Antivirus Home 8 records MEDIUM Avast Antivirus Professional 8 records MEDIUM Free Antivirus 8 records LOW Avast Antivirus 6 records MEDIUM Premium Security 6 records LOW Avg Antivirus 3 records LOW Cleanup Premium 3 records LOW

Records

6 records in Premium Security · all components

TI-2019-13619 CVE-2019-18894 · GHSA-8g22-628c-4vg2

In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to…

LOW 38

In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port 27275 to support Bank Mode functionality.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.01776 Published 2020-01-13 No fix listed CWE-78

TI-2023-22493 CVE-2023-42125 · GHSA-665q-2m8r-wpx6

Link following in Avast Premium Security

LOW 36

Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability.

CVSS 3.0HIGH 7.8 Local Low privileges No interaction EPSS 0.00414 Published 2024-05-03 No fix listed CWE-706

TI-2023-22492 CVE-2023-42124 · GHSA-4qvm-73c7-9w94

Incorrect authorization in Avast Premium Security

LOW 34

Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00302 Published 2024-05-03 No fix listed CWE-863

TI-2022-11552 CVE-2022-28964 · GHSA-j4xv-vq4c-x7jr

An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build…

LOW 31

An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) via a crafted DLL file.

CVSS 3.1HIGH 7.1 Local No auth User interaction EPSS 0.00236 Published 2022-05-20 No fix listed CWE-426

TI-2022-11553 CVE-2022-28965 · GHSA-rpg4-8g9f-9p3r

Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in…

LOW 29

Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a craf…

CVSS 3.1MEDIUM 6.5 Local High privileges User interaction EPSS 0.00295 Published 2022-05-20 No fix listed CWE-427

TI-2021-08781 CVE-2021-27241 · GHSA-76qj-3c6g-8v48

Link following in Avast Premium Security

LOW 27

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.5653.561).

CVSS 3.1MEDIUM 6.1 Local Low privileges No interaction EPSS 0.0027 Published 2021-03-29 No fix listed CWE-59

Open these records in search →