Vulnerabilities

TI-2026-22108 CVE-2026-27748 · GHSA-w3vx-x8fj-r29m

Avira Internet Security Arbitrary File Deletion via Improper Link Resolution

HIGH 69

Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00194 Published 2026-03-05 Fixed in 1.1.114.3113 CWE-59

TI-2026-22109 CVE-2026-27749 · GHSA-w8px-r6g2-r3wp

HIGH 69

Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00356 Published 2026-03-05 Fixed in 1.1.114.3113 CWE-502

TI-2026-22110 CVE-2026-27750 · GHSA-qfjh-mfrq-8j64

HIGH 69

Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00114 Published 2026-03-05 Fixed in 1.1.114.3113 CWE-367