Avast Antivirus vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Avast Antivirus: 4 record(s), with affected versions and fixes.
cpe:2.3:a:avast:antivirus

CVE-2025-71326 High · 7.8 CWE-428 Jun 19, 2026

AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted binary path in the service configuration to inject malicious executables that execute with high-level system permissions.

CVE-2025-7007 High · 7.5 CWE-476 Dec 1, 2025

Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3)

NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3.

CVE-2025-3500 Critical · 9.8 CWE-190 Dec 1, 2025

Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation

Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3.

CVE-2025-13032 High · 7.8 CWE-367 Nov 11, 2025

TOCTOU Race Condition in Avast Antivirus

Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow.