Vulnerabilities > Avast

DATE CVE VULNERABILITY TITLE RISK
2022-12-06 CVE-2022-4173 Improper Privilege Management vulnerability in Avast and AVG Antivirus
A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios.
network
low complexity
avast CWE-269
8.8
2022-05-20 CVE-2022-28964 Untrusted Search Path vulnerability in Avast Premium Security 19.8.2393/20.8.2429
An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) via a crafted DLL file.
local
avast CWE-426
5.4
2022-05-20 CVE-2022-28965 Unspecified vulnerability in Avast Premium Security 19.8.2393/20.8.2429
Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted DLL file.
local
avast
4.4
2021-12-27 CVE-2021-45335 Incorrect Default Permissions vulnerability in Avast Antivirus
Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files.
local
low complexity
avast CWE-276
7.2
2021-12-27 CVE-2021-45336 Unspecified vulnerability in Avast Antivirus
Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated privileges by using system IPC interfaces which could lead to exit the sandbox and acquire SYSTEM privileges.
local
low complexity
avast
7.2
2021-12-27 CVE-2021-45337 Unspecified vulnerability in Avast Antivirus
Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elevated privileges by "hollowing" process wsc_proxy.exe which could lead to acquire antimalware (AM-PPL) protection.
local
low complexity
avast
7.2
2021-12-27 CVE-2021-45338 Unspecified vulnerability in Avast Antivirus
Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.
local
low complexity
avast
7.2
2021-12-27 CVE-2021-45339 Incorrect Authorization vulnerability in Avast Antivirus
Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the bypassing of Avast self-defense.
local
low complexity
avast CWE-863
7.2
2021-04-21 CVE-2020-23907 Out-of-bounds Write vulnerability in Avast Retdec 3.3
An issue was discovered in retdec v3.3.
network
low complexity
avast CWE-787
7.5
2021-03-29 CVE-2021-27241 Link Following vulnerability in Avast Premium Security 20.8.2429
This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.5653.561).
local
low complexity
avast CWE-59
3.6