avast Vulnerability Advisory Catalog

Total 73 security vulnerabilities recorded for avast software and firmware.

← Back to All Vendors
CVE-2025-3500 CRITICAL
Component: antivirus

Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from...

📅 2025-12-01
CVSS 9.0 Dossier →
CVE-2025-13032 CRITICAL
Component: antivirus

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow....

📅 2025-11-11
CVSS 9.9 Dossier →
Component: free_antivirus

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privilege...

📅 2024-11-22
CVSS 7.8 Dossier →
Component: free_antivirus

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privilege...

📅 2024-11-22
CVSS 7.8 Dossier →
Component: cleanup_premium

Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on aff...

📅 2024-11-22
CVSS 7.8 Dossier →
Component: cleanup_premium

Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on aff...

📅 2024-11-22
CVSS 7.8 Dossier →
Component: cleanup_premium

Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on aff...

📅 2024-11-22
CVSS 7.8 Dossier →
CVE-2024-7228 MEDIUM
Component: free_antivirus

Avast Free Antivirus Link Following Denial-of-Service Vulnerability. This vulnerability allows local attackers to create a denial-of-service condition...

📅 2024-11-22
CVSS 5.5 Dossier →
Component: free_antivirus

Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privilege...

📅 2024-11-22
CVSS 7.8 Dossier →
CVE-2024-9484 MEDIUM
Component: antivirus

An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar fil...

📅 2024-10-04
CVSS 5.1 Dossier →
CVE-2024-9483 MEDIUM
Component: antivirus

A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow ...

📅 2024-10-04
CVSS 5.1 Dossier →
CVE-2024-9482 MEDIUM
Component: antivirus

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file...

📅 2024-10-04
CVSS 5.1 Dossier →
CVE-2024-9481 MEDIUM
Component: antivirus

An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to...

📅 2024-10-04
CVSS 5.1 Dossier →
Component: antivirus

A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files o...

📅 2024-06-10
CVSS 7.0 Dossier →
Component: premium_security

Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate pri...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: premium_security

Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local attackers to esc...

📅 2024-05-03
CVSS 7.8 Dossier →
Component: avg_antivirus

A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vuln...

📅 2023-11-08
CVSS 8.2 Dossier →
Component: antivirus

Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSn...

📅 2023-07-11
CVSS 5.5 Dossier →
CVE-2023-1587 MEDIUM
Component: antivirus

Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Ant...

📅 2023-04-19
CVSS 5.8 Dossier →
CVE-2023-1586 MEDIUM
Component: antivirus

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrar...

📅 2023-04-19
CVSS 6.5 Dossier →
CVE-2023-1585 MEDIUM
Component: antivirus

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbi...

📅 2023-04-19
CVSS 6.5 Dossier →
Component: script_shield

The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker ...

📅 2022-12-08
CVSS 7.7 Dossier →
Component: avast

A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escala...

📅 2022-12-06
CVSS 7.3 Dossier →
Component: premium_security

Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers t...

📅 2022-05-20
CVSS 6.5 Dossier →
Page 1 of 4 (73 Total Records)