AVIRA records
41 published records for vendor avira.
Researcher profile
- Entered KEV
- 0 · 0%
- Weaponized
- 0 · 0%
- Pre-auth RCE
- 4
- With a fix record
- 7.3%
- Median publish → KEV
- No record has entered KEV
Recurring classes
- CWE-264 Permissions, Privileges, and Access Controls4
- CWE-59 Improper Link Resolution Before File Access ('Link Following')4
- CWE-20 Improper Input Validation1
- CWE-310 Cryptographic Issues1
- CWE-269 Improper Privilege Management1
- CWE-276 Incorrect Default Permissions1
The weakness classes this vendor ships most often: where to look.
CWEAll records
41 records| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
51Plan | CVE-2015-7303No exploit | Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code viaavira · management console | Critical10.0 | — | 35.1% | Sep 21, 2015 |
47Plan | CVE-2012-1459No exploit | The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8ahnlab · v3 internet security · CWE-264 | Medium4.3 | — | 99.8% | Mar 21, 2012 |
47Plan | CVE-2012-1443No exploit | The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010cat · quick heal · CWE-264 | Medium4.3 | — | 99.6% | Mar 21, 2012 |
46Plan | CVE-2012-1457No exploit | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.anti-virus · vba32 · CWE-264 | Medium4.3 | — | 98.3% | Mar 21, 2012 |
45Plan | CVE-2012-1425No exploit | The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1antiy · avl sdk · CWE-264 | Medium4.3 | — | 93.1% | Mar 21, 2012 |
42Plan | CVE-2007-2974No exploit | Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code viavira · antivir | Critical10.0 | — | 7.5% | May 31, 2007 |
40Plan | CVE-2020-8961No exploit | An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825.avira · free antivirus | Critical9.8 | — | 2.0% | Apr 9, 2020 |
35Monitor | CVE-2022-3368Proof of concept | Software Updater of Avira Security for Windows vulnerable to Privilege Escalationavira · avira security · CWE-276 | High8.8 | — | 1.0% | Oct 17, 2022 |
35Monitor | CVE-2019-18568No exploit | Avira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user.avira · free antivirus · CWE-680 | High8.8 | — | 0.7% | Dec 31, 2019 |
34Monitor | CVE-2016-10402No exploit | Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large ravira · antivirus · CWE-119 | High7.8 | — | 10.2% | Jul 27, 2017 |
32Monitor | CVE-2007-2973No exploit | Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a malavira · antivir | High7.8 | — | 3.4% | May 31, 2007 |
32Monitor | CVE-2007-2972No exploit | The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crashavira · antivir | High7.8 | — | 3.4% | May 31, 2007 |
32Monitor | CVE-2007-1673No exploit | unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite looamavis · amavis · CWE-399 | High7.8 | — | 3.1% | May 8, 2007 |
32Monitor | CVE-2007-1671No exploit | avpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a davira · antivir personal | High7.8 | — | 2.0% | May 8, 2007 |
31Monitor | CVE-2005-2957No exploit | Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows remavira · desktop | High7.5 | — | 4.0% | Sep 16, 2005 |
31Monitor | CVE-2023-51636No exploit | Avira Prime Link Following Local Privilege Escalation Vulnerabilityavira · avira prime · CWE-59 | High7.8 | — | 0.9% | May 22, 2024 |
31Monitor | CVE-2019-11396No exploit | An issue was discovered in Avira Free Security Suite 10.avira · free security suite · CWE-59 | High7.8 | — | 0.5% | Aug 29, 2019 |
31Monitor | CVE-2020-12463No exploit | An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links.avira · software updater | High7.8 | — | 0.4% | May 5, 2020 |
31Monitor | CVE-2020-12254No exploit | Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink.avira · antivirus · CWE-59 | High7.8 | — | 0.3% | Apr 26, 2020 |
31Monitor | CVE-2026-27749No exploit | Avira Internet Security System Speedup Insecure Deserializationavira · internet security · CWE-502 | High7.8 | — | 0.3% | Mar 5, 2026 |
31Monitor | CVE-2022-4294No exploit | Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalationavira · avira security · CWE-269 | High7.8 | — | 0.1% | Jan 10, 2023 |
30Monitor | CVE-2015-7732No exploit | The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.avira · avira mobile security · CWE-200 | High7.5 | — | 1.0% | Jun 15, 2017 |
29Monitor | CVE-2023-36673No exploit | An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS.avira · phantom vpn · CWE-319 | High7.3 | — | 0.5% | Aug 9, 2023 |
28Monitor | CVE-2008-6962No exploit | Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary codavira · antivir · CWE-20 | High7.2 | — | 0.6% | Aug 13, 2009 |
28Monitor | CVE-2006-1274No exploit | Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users toavira · antivir personal | High7.2 | — | 0.3% | Mar 19, 2006 |
- CVE-2015-730351Plan
Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via
CriticalCVSS 10.0No exploitEPSS 35%avira · management consoleSep 21, 2015
- CVE-2012-145947Plan
The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8
MediumCVSS 4.3No exploitEPSS 99%ahnlab · v3 internet securityMar 21, 2012
- CVE-2012-144347Plan
The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 2010
MediumCVSS 4.3No exploitEPSS 99%cat · quick healMar 21, 2012
- CVE-2012-145746Plan
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.
MediumCVSS 4.3No exploitEPSS 98%anti-virus · vba32Mar 21, 2012
- CVE-2012-142545Plan
The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1
MediumCVSS 4.3No exploitEPSS 93%antiy · avl sdkMar 21, 2012
- CVE-2007-297442Plan
Buffer overflow in the file parsing engine in Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to execute arbitrary code vi
CriticalCVSS 10.0No exploitEPSS 7%avira · antivirMay 31, 2007
- CVE-2020-896140Plan
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825.
CriticalCVSS 9.8No exploitEPSS 2%avira · free antivirusApr 9, 2020
- CVE-2022-336835Monitor
Software Updater of Avira Security for Windows vulnerable to Privilege Escalation
HighCVSS 8.8Proof of conceptEPSS 1%avira · avira securityOct 17, 2022
- CVE-2019-1856835Monitor
Avira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user.
HighCVSS 8.8No exploitEPSS 0%avira · free antivirusDec 31, 2019
- CVE-2016-1040234Monitor
Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large r
HighCVSS 7.8No exploitEPSS 10%avira · antivirusJul 27, 2017
- CVE-2007-297332Monitor
Avira Antivir Antivirus before 7.03.00.09 allows remote attackers to cause a denial of service (infinite loop and CPU consumption) via a mal
HighCVSS 7.8No exploitEPSS 3%avira · antivirMay 31, 2007
- CVE-2007-297232Monitor
The file parsing engine in Avira Antivir Antivirus before 7.04.00.24 allows remote attackers to cause a denial of service (application crash
HighCVSS 7.8No exploitEPSS 3%avira · antivirMay 31, 2007
- CVE-2007-167332Monitor
unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loo
HighCVSS 7.8No exploitEPSS 3%amavis · amavisMay 8, 2007
- CVE-2007-167132Monitor
avpack32.dll before 7.3.0.6 in Avira AntiVir allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a d
HighCVSS 7.8No exploitEPSS 2%avira · antivir personalMay 8, 2007
- CVE-2005-295731Monitor
Stack-based buffer overflow in AVIRA Desktop for Windows 1.00.00.68 with AVPACK32.DLL 6.31.0.3, when archive scanning is enabled, allows rem
HighCVSS 7.5No exploitEPSS 4%avira · desktopSep 16, 2005
- CVE-2023-5163631Monitor
Avira Prime Link Following Local Privilege Escalation Vulnerability
HighCVSS 7.8No exploitEPSS 0%avira · avira primeMay 22, 2024
- CVE-2019-1139631Monitor
An issue was discovered in Avira Free Security Suite 10.
HighCVSS 7.8No exploitEPSS 0%avira · free security suiteAug 29, 2019
- CVE-2020-1246331Monitor
An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links.
HighCVSS 7.8No exploitEPSS 0%avira · software updaterMay 5, 2020
- CVE-2020-1225431Monitor
Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink.
HighCVSS 7.8No exploitEPSS 0%avira · antivirusApr 26, 2020
- CVE-2026-2774931Monitor
Avira Internet Security System Speedup Insecure Deserialization
HighCVSS 7.8No exploitEPSS 0%avira · internet securityMar 5, 2026
- CVE-2022-429431Monitor
Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation
HighCVSS 7.8No exploitEPSS 0%avira · avira securityJan 10, 2023
- CVE-2015-773230Monitor
The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.
HighCVSS 7.5No exploitEPSS 1%avira · avira mobile securityJun 15, 2017
- CVE-2023-3667329Monitor
An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS.
HighCVSS 7.3No exploitEPSS 0%avira · phantom vpnAug 9, 2023
- CVE-2008-696228Monitor
Avira AntiVir Premium, Premium Security Suite, AntiVir Professional, and AntiVir Personal - FREE allows local users to execute arbitrary cod
HighCVSS 7.2No exploitEPSS 0%avira · antivirAug 13, 2009
- CVE-2006-127428Monitor
Classic Planer in AntiVir PersonalEdition Classic 7 does not drop privileges before executing external programs, which allows local users to
HighCVSS 7.2No exploitEPSS 0%avira · antivir personalMar 19, 2006