avast Vulnerability Advisory Catalog

Total 73 security vulnerabilities recorded for avast software and firmware.

← Back to All Vendors
Component: premium_security

An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Servic...

📅 2022-05-20
CVSS 7.1 Dossier →
Component: antivirus

Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process whi...

📅 2021-12-27
CVSS 7.8 Dossier →
Component: antivirus

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily...

📅 2021-12-27
CVSS 7.8 Dossier →
Component: antivirus

Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elev...

📅 2021-12-27
CVSS 8.8 Dossier →
Component: antivirus

Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated privileges...

📅 2021-12-27
CVSS 8.8 Dossier →
Component: antivirus

Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and...

📅 2021-12-27
CVSS 8.8 Dossier →
CVE-2020-23907 CRITICAL
Component: retdec

An issue was discovered in retdec v3.3. In function canSplitFunctionOn() of ir_modifications.cpp, there is a possible out of bounds read due to a heap...

📅 2021-04-21
CVSS 9.8 Dossier →
Component: premium_security

This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.56...

📅 2021-03-29
CVSS 6.1 Dossier →
Component: secureline_vpn

The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the lo...

📅 2020-09-13
CVSS 5.5 Dossier →
Component: antivirus

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continue...

📅 2020-09-10
CVSS 5.5 Dossier →
Component: avg_antivirus

An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The v...

📅 2020-06-29
CVSS 5.5 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 7.5 Dossier →
CVE-2020-10867 CRITICAL
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 9.8 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 7.5 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 7.5 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 6.5 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 7.5 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 7.8 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows attac...

📅 2020-04-01
CVSS 7.5 Dossier →
Component: antivirus

An issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite vulnerability in the aswAvLog Log Library results in Denia...

📅 2020-04-01
CVSS 7.5 Dossier →
Component: antitrack

Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate certificates, and thus a man-...

📅 2020-03-09
CVSS 7.4 Dossier →
CVE-2020-9399 MEDIUM
Component: antivirus_for_linux

The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antivirus...

📅 2020-02-28
CVSS 5.5 Dossier →
Component: secure_browser

A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the AvastB...

📅 2020-01-27
CVSS 7.8 Dossier →
Component: premium_security

In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port 27275 to su...

📅 2020-01-13
CVSS 7.8 Dossier →
Page 2 of 4 (73 Total Records)