https://vulnogram.org/ Most recent CVEs assigned by nlok (nlok). https://vulnogram.org/seaview/icons/nlok.png https://vulnogram.org/ Wed, 21 Oct 2026 07:00:06 GMT https://vulnogram.org/CVE-2025-7007 https://vulnogram.org/CVE-2025-7007 NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3. High Mon, 01 Dec 2025 16:34:22 GMT https://vulnogram.org/CVE-2025-3500 https://vulnogram.org/CVE-2025-3500 Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3. Critical Mon, 01 Dec 2025 16:09:00 GMT https://vulnogram.org/CVE-2025-8351 https://vulnogram.org/CVE-2025-8351 Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denial-of-Service of the antivirus engine process. This issue affects Avira Antivirus on Window… High Mon, 01 Dec 2025 15:51:42 GMT https://vulnogram.org/CVE-2025-10101 https://vulnogram.org/CVE-2025-10101 Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus… High Mon, 01 Dec 2025 15:32:31 GMT https://vulnogram.org/CVE-2025-13032 https://vulnogram.org/CVE-2025-13032 Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3 on windows allows local attacker to escalate privelages via pool overflow. Critical Tue, 11 Nov 2025 16:16:33 GMT https://vulnogram.org/CVE-2025-10905 https://vulnogram.org/CVE-2025-10905 Collision in MiniFilter driver in Avast Software Avast Free Antivirus before 25.9 on Windows allows a local attacker with administrative privileges to disable real-time protection and self-defense mechanisms. Medium Tue, 11 Nov 2025 15:52:21 GMT https://vulnogram.org/CVE-2025-3025 https://vulnogram.org/CVE-2025-3025 Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiting insecure file delete operations. Reported in CCleaner v. 6.33.11465. This issue affects… High Mon, 15 Sep 2025 12:20:21 GMT https://vulnogram.org/CVE-2025-4134 https://vulnogram.org/CVE-2025-4134 Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unverified file write. High Wed, 28 May 2025 13:53:26 GMT https://vulnogram.org/CVE-2024-9524 https://vulnogram.org/CVE-2024-9524 Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTE… High Fri, 09 May 2025 15:37:23 GMT https://vulnogram.org/CVE-2024-13962 https://vulnogram.org/CVE-2024-13962 Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of S… High Fri, 09 May 2025 15:20:51 GMT https://vulnogram.org/CVE-2024-13961 https://vulnogram.org/CVE-2024-13961 Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creatin… High Fri, 09 May 2025 15:20:42 GMT https://vulnogram.org/CVE-2024-13960 https://vulnogram.org/CVE-2024-13960 Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic… High Fri, 09 May 2025 15:20:29 GMT https://vulnogram.org/CVE-2024-13959 https://vulnogram.org/CVE-2024-13959 Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM via creating a symbolic link and lever… High Fri, 09 May 2025 15:20:18 GMT https://vulnogram.org/CVE-2024-13759 https://vulnogram.org/CVE-2024-13759 Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletion High Fri, 09 May 2025 15:20:02 GMT https://vulnogram.org/CVE-2024-13944 https://vulnogram.org/CVE-2024-13944 Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows local attackers to escalate privileges and execute arbitrary code in the context of SYSTEM… High Fri, 09 May 2025 15:18:34 GMT https://vulnogram.org/CVE-2024-9484 https://vulnogram.org/CVE-2024-9484 An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application during file processing. Medium Fri, 04 Oct 2024 12:44:25 GMT https://vulnogram.org/CVE-2024-9483 https://vulnogram.org/CVE-2024-9483 A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malformed xar file to crash the application during processing. Medium Fri, 04 Oct 2024 12:29:16 GMT https://vulnogram.org/CVE-2024-9482 https://vulnogram.org/CVE-2024-9482 An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash the application during file processing. Medium Fri, 04 Oct 2024 12:22:47 GMT https://vulnogram.org/CVE-2024-9481 https://vulnogram.org/CVE-2024-9481 An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the application during file processing. Medium Fri, 04 Oct 2024 12:15:14 GMT https://vulnogram.org/CVE-2024-5803 https://vulnogram.org/CVE-2024-5803 The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-of-use (TOCTOU) when self protection is disabled. High Thu, 03 Oct 2024 14:20:01 GMT https://vulnogram.org/CVE-2024-5102 https://vulnogram.org/CVE-2024-5102 A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run processes as NT AUTHORITY\SYSTEM. The vulnerability exists within the "Repair" (settings -> tr… High Mon, 10 Jun 2024 16:15:56 GMT https://vulnogram.org/CVE-2023-5760 https://vulnogram.org/CVE-2023-5760 A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalati… High Wed, 08 Nov 2023 16:36:29 GMT https://vulnogram.org/CVE-2023-1900 https://vulnogram.org/CVE-2023-1900 A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. Issue was fixed with Endpointprotecti… High Wed, 19 Apr 2023 18:47:17 GMT https://vulnogram.org/CVE-2023-1587 https://vulnogram.org/CVE-2023-1587 Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.11 Medium Wed, 19 Apr 2023 18:39:52 GMT https://vulnogram.org/CVE-2023-1586 https://vulnogram.org/CVE-2023-1586 Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11 Medium Wed, 19 Apr 2023 18:35:09 GMT https://vulnogram.org/CVE-2023-1585 https://vulnogram.org/CVE-2023-1585 Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and vir… Medium Wed, 19 Apr 2023 18:27:57 GMT https://vulnogram.org/CVE-2022-4429 https://vulnogram.org/CVE-2022-4429 Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges to cause a Denial of Service. The issue was fixed with Avira Security version 1.1.78 Medium Tue, 10 Jan 2023 09:28:41 GMT https://vulnogram.org/CVE-2022-4294 https://vulnogram.org/CVE-2022-4294 Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that a… High Tue, 10 Jan 2023 09:14:47 GMT https://vulnogram.org/CVE-2022-4291 https://vulnogram.org/CVE-2022-4291 The aswjsflt.dll library from Avast Antivirus windows contained a potentially exploitable heap corruption vulnerability that could enable an attacker to bypass the sandbox of the application it was loaded into, if applicable. This issue was fixed in… High Wed, 07 Dec 2022 23:45:04 GMT https://vulnogram.org/CVE-2022-4173 https://vulnogram.org/CVE-2022-4173 A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.… High Mon, 05 Dec 2022 23:15:33 GMT https://vulnogram.org/CVE-2022-3368 https://vulnogram.org/CVE-2022-3368 A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.3… High Mon, 17 Oct 2022 20:52:01 GMT https://vulnogram.org/CVE-2022-28795 https://vulnogram.org/CVE-2022-28795 A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the passwo… Tue, 12 Apr 2022 16:11:34 GMT