Avast vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2025-71326 AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevHigh 8.5 · Jun 19, 2026
• CVE-2020-37037 Avast SecureLine 5.5.522.0 contains an unquoted service path vulnerability that allows local users to potentially execute code with elevated system privileges.High 8.5 · Feb 1, 2026
• CVE-2025-7007 NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus procHigh 7.5 · Dec 1, 2025
• CVE-2025-3500 Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.Critical 9 · Dec 1, 2025
• CVE-2025-13032 Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.Critical 9.9 · Nov 11, 2025
• CVE-2025-4134 Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unvHigh 7.3 · May 28, 2025
• CVE-2024-13962 Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc.High 7.8 · May 9, 2025
• CVE-2024-13961 Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackHigh 7.8 · May 9, 2025
• CVE-2024-7233 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-7232 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-7231 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-7230 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-7229 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-7227 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability.High 7.8 · Nov 22, 2024
• CVE-2024-5102 A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run procHigh 7.3 · Jun 10, 2024
• CVE-2023-42125 Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability.High 7.8 · May 2, 2024
• CVE-2023-42124 Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability.High 7.8 · May 2, 2024
• CVE-2022-28964 An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) viHigh 7.1 · May 19, 2022
• CVE-2021-45339 Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "hollowing" trusted process which could lHigh 7.8 · Dec 27, 2021
• CVE-2021-45338 Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful High 7.8 · Dec 27, 2021
• CVE-2021-45337 Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with SYSTEM privileges to gain elevated priviHigh 8.8 · Dec 27, 2021
• CVE-2021-45336 Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed code to gain elevated privileges by using High 8.8 · Dec 27, 2021
• CVE-2021-45335 Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and thereforeHigh 8.8 · Dec 27, 2021
• CVE-2020-23907 An issue was discovered in retdec v3.3.Critical 9.8 · Apr 21, 2021
• CVE-2020-10868 An issue was discovered in Avast Antivirus before 20.High 7.5 · Apr 1, 2020