Skip to content
Noroxi

Avast records

75 published records for vendor avast.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
3
With a fix record
6.7%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 19
  4. 20
  5. 21
  6. 22
  7. 23
  8. 24
  9. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

75 records
  • CVE-2020-23907
    40Plan

    An issue was discovered in retdec v3.3.

    CriticalCVSS 9.8No exploitEPSS 2%

    avast · retdecApr 21, 2021

  • CVE-2020-10867
    40Plan

    An issue was discovered in Avast Antivirus before 20.

    CriticalCVSS 9.8No exploitEPSS 2%

    avast · antivirusApr 1, 2020

  • CVE-2017-8307
    40Plan

    In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible to launch predefined

    CriticalCVSS 9.8No exploitEPSS 1%

    avast · antivirusApr 27, 2017

  • CVE-2022-4291
    40Plan

    Aswjsflt.dll in Avast Antivirus windows caused a crash of the Mozilla Firefox browser due to heap corruption

    CriticalCVSS 10.0No exploitEPSS 0%

    avast · script shieldDec 7, 2022

  • CVE-2010-3126
    39Monitor

    Untrusted search path vulnerability in avast! Free Antivirus version 5.0.594 and earlier allows local users, and possibly remote attackers,

    CriticalCVSS 9.3Proof of conceptEPSS 7%

    avast · avast antivirus freeAug 26, 2010

  • CVE-2007-2845
    39Monitor

    Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to e

    CriticalCVSS 9.3No exploitEPSS 6%

    avast · avast antivirusMay 24, 2007

  • CVE-2025-3500
    39Monitor

    Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

    CriticalCVSS 9.8Proof of conceptEPSS 0%

    avast · antivirusDec 1, 2025

  • CVE-2008-5523
    38Monitor

    avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML docume

    CriticalCVSS 9.3No exploitEPSS 2%

    avast · avast antivirusDec 12, 2008

  • CVE-2022-4173
    35Monitor

    Avast and AVG Antivirus for Windows vulnerable to Privilege Escalation

    HighCVSS 8.8No exploitEPSS 0%

    avast · avastDec 5, 2022

  • CVE-2021-45336
    35Monitor

    Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated

    HighCVSS 8.8No exploitEPSS 0%

    avast · antivirusDec 27, 2021

  • CVE-2021-45337
    35Monitor

    Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to

    HighCVSS 8.8No exploitEPSS 0%

    avast · antivirusDec 27, 2021

  • CVE-2021-45335
    35Monitor

    Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of

    HighCVSS 8.8No exploitEPSS 0%

    avast · antivirusDec 27, 2021

  • CVE-2016-3986
    33Monitor

    Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a crafted PE file, re

    HighCVSS 7.8Proof of conceptEPSS 7%

    avast · avastApr 11, 2016

  • CVE-2007-1672
    32Monitor

    avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry struc

    HighCVSS 7.8No exploitEPSS 3%

    avast · avast antivirusMay 8, 2007

  • CVE-2007-1673
    32Monitor

    unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loo

    HighCVSS 7.8No exploitEPSS 3%

    amavis · amavisMay 8, 2007

  • CVE-2019-18894
    32Monitor

    In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port 2

    HighCVSS 7.8No exploitEPSS 1%

    avast · premium securityJan 13, 2020

  • CVE-2020-10863
    31Monitor

    An issue was discovered in Avast Antivirus before 20.

    HighCVSS 7.5No exploitEPSS 2%

    avast · antivirusApr 1, 2020

  • CVE-2020-10860
    31Monitor

    An issue was discovered in Avast Antivirus before 20.

    HighCVSS 7.5No exploitEPSS 2%

    avast · antivirusApr 1, 2020

  • CVE-2020-10868
    31Monitor

    An issue was discovered in Avast Antivirus before 20.

    HighCVSS 7.5No exploitEPSS 1%

    avast · antivirusApr 1, 2020

  • CVE-2020-10861
    31Monitor

    An issue was discovered in Avast Antivirus before 20.

    HighCVSS 7.5No exploitEPSS 1%

    avast · antivirusApr 1, 2020

  • CVE-2020-10865
    31Monitor

    An issue was discovered in Avast Antivirus before 20.

    HighCVSS 7.5No exploitEPSS 1%

    avast · antivirusApr 1, 2020

  • CVE-2019-17093
    31Monitor

    An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8.

    HighCVSS 7.8No exploitEPSS 0%

    avast · antivirusOct 23, 2019

  • CVE-2019-17190
    31Monitor

    A Local Privilege Escalation issue was discovered in Avast Secure Browser 76.0.1659.101.

    HighCVSS 7.8No exploitEPSS 0%

    avast · secure browserJan 27, 2020

  • CVE-2020-10862
    31Monitor

    An issue was discovered in Avast Antivirus before 20.

    HighCVSS 7.8No exploitEPSS 0%

    avast · antivirusApr 1, 2020

  • CVE-2015-8620
    31Monitor

    Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Premier, and Free Anti

    HighCVSS 7.8No exploitEPSS 0%

    avast · avast free antivirusApr 13, 2016