Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation
Priority LOW 33CWE-269Published · Updated
Key facts
- Attack vector
- Local
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Privilege escalation
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-269.
Summary
Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00195 9th percentileScored 2026-11-07
Fix Fixed Norton Antivirus Windows Eraser Engine (NortonLifelock (GenDigital)): 119.1.5.1Avira Security (NortonLifelock (GenDigital)): 1.1.78+2 more products
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| NortonLifelock (GenDigital) | Norton Antivirus Windows Eraser Engine | before 119.1.5.1 | 119.1.5.1 | Patch available | CNA |
| NortonLifelock (GenDigital) | Avira Security | before 1.1.78 | 1.1.78 | Patch available | CNA |
| NortonLifelock (GenDigital) | Avast Antivirus | before 22.10 | 22.10 | Patch available | CNA |
| NortonLifelock (GenDigital) | AVG Antivirus | before 22.10 | 22.10 | Patch available | CNA |
- Norton Antivirus Windows Eraser Engine VendorNortonLifelock (GenDigital) Affected before 119.1.5.1 Fixed in 119.1.5.1 Patch available CNA
- Avira Security VendorNortonLifelock (GenDigital) Affected before 1.1.78 Fixed in 1.1.78 Patch available CNA
- Avast Antivirus VendorNortonLifelock (GenDigital) Affected before 22.10 Fixed in 22.10 Patch available CNA
- AVG Antivirus VendorNortonLifelock (GenDigital) Affected before 22.10 Fixed in 22.10 Patch available CNA
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:avira:avira_security:*:*:*:*:*:windows:*:* | before 1.1.78 | Vulnerable | Gen Digital |
| cpe:2.3:a:norton:power_eraser:*:*:*:*:*:windows:*:* | before 119.1.5.1 | Vulnerable | Norton |
| cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:* | before 22.10 | Vulnerable | Avast |
| cpe:2.3:a:avg:antivirus:*:*:*:*:*:*:*:* | before 22.10 | Vulnerable | AVG |
| cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* | not specified by NVD | Running on | Microsoft |
- cpe:2.3:a:avira:avira_security:*:*:*:*:*:windows:*:* Versions before 1.1.78 Vulnerable ·Gen Digital
- cpe:2.3:a:norton:power_eraser:*:*:*:*:*:windows:*:* Versions before 119.1.5.1 Vulnerable ·Norton
- cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:* Versions before 22.10 Vulnerable ·Avast
- cpe:2.3:a:avg:antivirus:*:*:*:*:*:*:*:* Versions before 22.10 Vulnerable ·AVG
- cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·Microsoft
Remediation
- Fix · CNA Norton Antivirus Windows Eraser Engine (NortonLifelock (GenDigital)) Fixed in 119.1.5.1
- Fix · CNA Avira Security (NortonLifelock (GenDigital)) Fixed in 1.1.78
- Fix · CNA Avast Antivirus (NortonLifelock (GenDigital)) Fixed in 22.10
- Fix · CNA AVG Antivirus (NortonLifelock (GenDigital)) Fixed in 22.10
Timeline
- 2026-10-02 Threatist record created from CVE-2022-4294
- 2026-10-03 Alias added: GHSA-69fr-p5cc-p429
References
Sources
- CVE-2022-4294 · CVE Program
- CVE-2022-4294 · NVD
- FIRST EPSS
- GHSA-69fr-p5cc-p429 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences