Browse CVEs

MEDIUM 6.1 CVE-2021-27241 This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.5… Premium Security Mitigation only Fix from $1,6002021-03-29 MEDIUM 5.5 CVE-2020-25289 The VPN service in AVAST SecureLine before 5.6.4982.470 allows local users to write to arbitrary files via an Object Manager symbolic link from the l… Secureline Vpn 5.6.4982.470+ Fix from $1,6002020-09-13 MEDIUM 5.5 CVE-2020-15024 An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562. An entered password continu… Antivirus Mitigation only Fix from $1,6002020-09-10 MEDIUM 5.5 CVE-2020-13657 An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The … Avg Antivirus 20.4+ Fix from $1,6002020-06-29 CRITICAL 9.8 CVE-2020-10867 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $2,3002020-04-01 HIGH 7.5 CVE-2020-10868 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $1,9502020-04-01 HIGH 7.5 CVE-2020-10865 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $1,9502020-04-01 HIGH 7.5 CVE-2020-10866 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $1,9502020-04-01 MEDIUM 6.5 CVE-2020-10864 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $1,6002020-04-01 HIGH 7.8 CVE-2020-10862 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $1,9502020-04-01 HIGH 7.5 CVE-2020-10860 An issue was discovered in Avast Antivirus before 20. An Arbitrary Memory Address Overwrite vulnerability in the aswAvLog Log Library results in Deni… Antivirus 20.0+ Fix from $1,9502020-04-01 HIGH 7.5 CVE-2020-10861 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $1,9502020-04-01 HIGH 7.5 CVE-2020-10863 An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service (AvastSvc.exe) allows atta… Antivirus 20.0+ Fix from $1,9502020-04-01 HIGH 7.4 CVE-2020-8987 Avast AntiTrack before 1.5.1.172 and AVG Antitrack before 2.0.0.178 proxies traffic to HTTPS sites but does not validate certificates, and thus a man… Antitrack 1.5.1.172 / 2.0.0.178+ Fix from $1,9502020-03-09 MEDIUM 5.5 CVE-2020-9399 The Avast AV parsing engine allows virus-detection bypass via a crafted ZIP archive. This affects versions before 12 definitions 200114-0 of Antiviru… Antivirus For Linux 12.0+ Fix from $1,6002020-02-28 HIGH 7.8 CVE-2019-17190 A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101. The vulnerability is due to an insecure ACL set by the Avast… Secure Browser No fix yet Fix from $1,9502020-01-27 HIGH 7.8 CVE-2019-18894 In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port 27275 to s… Premium Security No fix yet Fix from $1,9502020-01-13 MEDIUM 6.1 CVE-2019-18893 XSS in the Video Downloader component before 1.5 of Avast Secure Browser 77.1.1831.91 and AVG Secure Browser 77.0.1790.77 allows websites to execute … Secure Browser 1.5+ Fix from $1,6002020-01-13 MEDIUM 6.1 CVE-2019-18653 A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Net… Antivirus No fix yet Fix from $1,6002019-11-01 HIGH 7.8 CVE-2019-17093 An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %W… Antivirus 19.8+ Fix from $1,9502019-10-23 HIGH 7.8 CVE-2018-12572 Avast Free Antivirus prior to 19.1.2360 stores user credentials in memory upon login, which allows local users to obtain sensitive information by dum… Free Antivirus 19.1.2360+ Fix from $1,9502019-03-21 CRITICAL 9.8 CVE-2017-8307 In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined binaries,… Antivirus after 12.3.2279 Fix from $2,3002017-04-27 HIGH 7.5 CVE-2017-8308 In Avast Antivirus before v17, an unprivileged user (and thus malware or a virus) can mark an arbitrary process as Trusted from the perspective of th… Antivirus after 12.3.2279 Fix from $1,9502017-04-27 MEDIUM 6.7 CVE-2017-5567 Code injection vulnerability in Avast Premier 12.3 (and earlier), Internet Security 12.3 (and earlier), Pro Antivirus 12.3 (and earlier), and Free An… Free Antivirus after 12.3 Fix from $1,6002017-03-21 MEDIUM 5.5 CVE-2016-4025 Avast Internet Security v11.x.x, Pro Antivirus v11.x.x, Premier v11.x.x, Free Antivirus v11.x.x, Business Security v11.x.x, Endpoint Protection v8.x.… Business Security after 8.0.1609 Fix from $1,6002016-11-03 HIGH 7.8 CVE-2015-8620 Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Antivirus bef… Avast Free Antivirus after 11.1.2245 Fix from $1,9502016-04-13 HIGH 7.8 CVE-2016-3986EPSS 8% Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, related to … Avast No fix yet Fix from $1,9502016-04-12 MEDIUM 6.4 CVE-2015-5662 Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP… Avast Antivirus after 151017-1 Fix from $1,6002015-10-18 HIGH 9.3 CVE-2010-3126EPSS 8% Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers, to execut… Avast Antivirus Free after 5.0.594 Fix from $1,9502010-08-26 HIGH 7.2 CVE-2010-0705 Aavmker4.sys in avast! 4.8 through 4.8.1368.0 and 5.0 before 5.0.418.0 running on Windows 2000 and XP does not properly validate input to IOCTL 0xb2d… Avast Antivirus Home after 5.0.396.0 Fix from $1,9502010-02-25