TI-2026-81935 Aliases CVE-2026-6064 GHSA-5qpm-4cp9-qch8

Link following in Norton, Avast and AVG Data Shredder

LOW 31CWE-59Published 2026-10-28 · Updated 2026-10-28

Key facts

Attack vector: Local
Privileges required: Low
User interaction: Required
Attack complexity: Low
Impact type: —
Confidentiality · integrity · availability: High · High · High
Fix status: Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Norton Antivirus, Avast Antivirus and AVG Internet Security before 26.5.10933 on Windows are affected. Improper link resolution before file access (CWE-59) in Data Shredder lets a local attacker with low privileges delete arbitrary files or folders during a privileged shred operation. The attacker can use this to gain SYSTEM privileges, and user interaction is required.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Description from the CNA

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder deletion that is leveraged to gain NT AUTHORITY\SYSTEM privelages.

Why it matters now

EPSS 0.00124 2nd percentileScored 2026-11-07

Fix Fixed Norton Antivirus (Gen Digital): 26.5Avast Antivirus (Gen Digital): 26.5+1 more product

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

Vendor	Product	Affected versions	Fixed in	Status	Source
Gen Digital	Norton Antivirus	before 26.5	26.5	Patch available	CNA
Gen Digital	Avast Antivirus	before 26.5	26.5	Patch available	CNA
Gen Digital	AVG Internet Security	before 26.5	26.5	Patch available	CNA

Norton Antivirus VendorGen Digital Affected before 26.5 Fixed in 26.5 Patch available CNA
Avast Antivirus VendorGen Digital Affected before 26.5 Fixed in 26.5 Patch available CNA
AVG Internet Security VendorGen Digital Affected before 26.5 Fixed in 26.5 Patch available CNA

Remediation

Upgrade Norton Antivirus, Avast Antivirus and AVG Internet Security to version 26.5 or later, the fixed version listed for each product.

Written with Claude Haiku 5.5 from the sources below · 2026-11-05

Fix · CNA Norton Antivirus (Gen Digital) Fixed in 26.5
Fix · CNA Avast Antivirus (Gen Digital) Fixed in 26.5
Fix · CNA AVG Internet Security (Gen Digital) Fixed in 26.5

Timeline

2026-10-28 Threatist record created from CVE-2026-6064
2026-10-28 Alias added: GHSA-5qpm-4cp9-qch8
2026-10-30 Priority changed: MEDIUM → LOW

References

Other 1

https://www.gendigital.com/us/en/contact-us/security-advisories/

TI-2026-57223 Avast sandbox privilege escalation via unpreserved DACLs on virtualized files in aswSnx.sys CVSS 3.1HIGH 8.8
TI-2026-22110 Avira Internet Security Optimizer TOCTOU CVSS 3.1HIGH 7.8
TI-2026-22109 Avira Internet Security System Speedup Insecure Deserialization CVSS 3.1HIGH 7.8
TI-2026-22108 Avira Internet Security Arbitrary File Deletion via Improper Link Resolution CVSS 3.1HIGH 7.8
TI-2015-06072 Use-after-free vulnerability in the Update Manager service in Avira Management Console… CVSS 2.0HIGH 10.0
TI-2023-18488 An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. CVSS 3.1HIGH 7.3

See all 69 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences