AVAST
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| CleanUp Premium | 5 | – | May 9, 2025 |
| Free Antivirus | 5 | – | Nov 11, 2025 |
| AVAST Antivirus | 4 | – | Jun 19, 2026 |
| Antivirus | 3 | – | Dec 1, 2025 |
| Premium Security | 3 | – | May 3, 2024 |
| CleanUp | 1 | – | May 9, 2025 |
| Avast Business Antivirus | 1 | – | May 28, 2025 |
| AVAST SecureLine | 1 | – | Feb 1, 2026 |
| Anitvirus | 1 | – | Dec 1, 2025 |
| (Free/Premiium/Ultimeat) Antivirus | 1 | – | Nov 11, 2025 |
Exploited and recent CVEs
- CVE-2025-71326 AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation 0.2%
- CVE-2020-37037 AVAST SecureLine 5.5.522.0 - 'SecureLine' Unquoted Service Path 0.2%
- CVE-2025-7007 Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3) 0.1%
- CVE-2025-7007 Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3) 0.1%
- CVE-2025-3500 Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation 0.5%
- CVE-2025-13032 Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow. 0.2%
- CVE-2025-10905 Collision in minifilter driver of Avast Free Antivirus results in disabling of real-time protection 0.1%
- CVE-2025-4134 Lack of file validation in Avast Business Antivirus for Linux allows writing untrusted update files 0.2%
- CVE-2024-13962 Link Following Local Privilege Escalation Vulnerability in Avast Cleanup Premium Version 24.2.16593.17810 0.2%
- CVE-2024-13961 Avast Cleanup Premium TuneupSvc Link Following Local Privilege Escalation Vulnerability 0.2%
- CVE-2024-13944 Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate (Also affects Avast CleanUp and AVG TuneUp) 0.2%
- CVE-2024-7233 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability 0.4%
- CVE-2024-7232 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability 0.4%
- CVE-2024-7227 Avast Free Antivirus AvastSvc Link Following Local Privilege Escalation Vulnerability 0.4%
- CVE-2024-7229 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability 0.3%
- CVE-2024-7231 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability 0.3%
- CVE-2024-7230 Avast Cleanup Premium Link Following Local Privilege Escalation Vulnerability 0.3%
- CVE-2024-7228 Avast Free Antivirus Link Following Denial-of-Service Vulnerability 0.3%
- CVE-2024-5102 Elevation of Privelage via symlinked file in Avast Antivirus 0.2%
- CVE-2023-42125 Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability 0.4%
- CVE-2023-42124 Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability 0.3%
- CVE-2023-1587 Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11 0.2%
- CVE-2023-1586 Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast an 0.2%
- CVE-2023-1585 Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed 0.2%
- CVE-2021-27241 This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429 (Build 20.8.5653.561). An attacker must first obtain the ability 0.3%