Vulnerabilities

Search by TI id or any alias (CVE, GHSA), vendor, product or CWE.

Filters

Reset all

Threatist priority CRITICAL 0 HIGH 0 MEDIUM 0 LOW 2

Signals Exploited in the wild (KEV) 0 Patch available 2 No fix listed 0 Has CVE 2

Fix status Fixed 2 Partial 0 Will not fix 0 Deferred 0 No fix listed 0

Impact type Code execution 0 Privilege escalation 0 Security bypass 0 Information disclosure 0 Tampering 0 Denial of service 1 Spoofing 0 Cross-site scripting 0 SQL injection 0

Attack vector Network 0 Adjacent network 0 Local 2 Physical 0

Requirements No authentication 2 No user interaction 0

Product

Products as named in CPE, with their records.

Published Last 7 days Last 30 days Last 12 months Any time

Weakness (CWE) CWE-125 Out-of-bounds Read 1 CWE-674 Uncontrolled Recursion 1

1 selected

2 records

Sort

Release: Gen Digital AVG Antivirus, Avast Antivirus and 3 more products 25021208 × Clear all filters

TI-2025-06378 CVE-2025-7011 · GHSA-j95q-6549-w3j4

Avast antivirus heap OOB when scanning a malformed zip file

Priority LOW 35

Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus process.

CVSS 3.1HIGH 7.8· Local · No auth · User interaction · EPSS 0.00146 · Published 2026-06-12 · Fixed in 25021208 CWE-125

TI-2025-06377 CVE-2025-7010 · GHSA-vf74-69rc-vmq4

Avast antivirus stack overflow when scanning a malformed PDF file

Priority LOW 24

Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process.

CVSS 3.1MEDIUM 5.5· Local · No auth · User interaction · EPSS 0.00113 · Published 2026-06-12 · Fixed in 25021208 CWE-674

THREATIST.IO

Vulnerability intelligence for security teams and AI agents.

Vulnerabilities Vendors Exploited (KEV) API & MCP Newsletter Privacy policy Terms of use

Newsletter Vulnerability intelligence in your inbox Subscribe

© 2026 Threatist.io · X (@threatist)Data: CVE Program, NVD, CISA KEV, FIRST EPSS, GitHub Advisory Database and Red Hat security data (both CC BY 4.0), Microsoft Security Response Center. This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences

We would like to use Google Analytics cookies to see how the site is used. They are set only if you accept. Privacy policy