Vulnerability · Published May 20, 2022 · Assigned by mitre

CVE-2022-28965

Medium 6.5

In plain English

A medium-severity security flaw in the affected software. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 22% of all known vulnerabilities).

Severity (CVSS NVD)6.5Medium

Exploit odds (30 days)0.3%top 77.7% of all CVEs

Exploited in the wildNo reportsnot in CISA KEV

Attack toolingNoneno public tooling known

Official description

Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows attackers to execute arbitrary code or cause a Denial of Service (DoS) via a crafted DLL file.

Affected products (as reported)

Vendor	Product	Versions
n/a	n/a	n/a

References

https://github.com/netero1010/Vulnerability-Disclosure/tree/main/CVE-2022-AVAST2 x_refsource_MISC
https://forum.avast.com/index.php?topic=318305.0 x_refsource_MISC