High

DATE	CVE	VULNERABILITY TITLE	RISK
2024-06-10	CVE-2024-5102	Link Following vulnerability in Avast Antivirus A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run processes as NT AUTHORITY\SYSTEM. The vulnerability exists within the "Repair" (settings -> troubleshooting -> repair) feature, which attempts to delete a file in the current user's AppData directory as NT AUTHORITY\SYSTEM. local high complexity avast CWE-59	7.0
2023-01-10	CVE-2022-4294	Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user. local low complexity avira norton avast avg	7.8
2021-12-27	CVE-2021-45335	Incorrect Default Permissions vulnerability in Avast Antivirus Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files. local low complexity avast CWE-276	8.8
2021-12-27	CVE-2021-45336	Unspecified vulnerability in Avast Antivirus Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated privileges by using system IPC interfaces which could lead to exit the sandbox and acquire SYSTEM privileges. local low complexity avast	8.8
2021-12-27	CVE-2021-45337	Unspecified vulnerability in Avast Antivirus Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elevated privileges by "hollowing" process wsc_proxy.exe which could lead to acquire antimalware (AM-PPL) protection. local low complexity avast	8.8
2021-12-27	CVE-2021-45338	Unspecified vulnerability in Avast Antivirus Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security. local low complexity avast	7.8
2021-12-27	CVE-2021-45339	Incorrect Authorization vulnerability in Avast Antivirus Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lead to the bypassing of Avast self-defense. local low complexity avast CWE-863	7.8
2020-04-01	CVE-2020-10868	Unspecified vulnerability in Avast Antivirus An issue was discovered in Avast Antivirus before 20. network low complexity avast	7.5
2020-04-01	CVE-2020-10866	Inadequate Encryption Strength vulnerability in Avast Antivirus An issue was discovered in Avast Antivirus before 20. network low complexity avast CWE-326	7.5
2020-04-01	CVE-2020-10865	Inclusion of Functionality from Untrusted Control Sphere vulnerability in Avast Antivirus An issue was discovered in Avast Antivirus before 20. network low complexity avast CWE-829	7.5