Lucene search

K
cvelistNLOKCVELIST:CVE-2022-4294
HistoryJan 10, 2023 - 9:14 a.m.

CVE-2022-4294 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation

2023-01-1009:14:47
CWE-269
NLOK
www.cve.org
cve-2022-4294
windows
privilege escalation

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or user.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Norton Antivirus Windows Eraser Engine",
    "vendor": "NortonLifelock (GenDigital)",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 119.1.5.1"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Avira Security ",
    "vendor": "NortonLifelock (GenDigital)",
    "versions": [
      {
        "status": "affected",
        "version": "prior to 1.1.78"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "Avast Antivirus",
    "vendor": "NortonLifelock (GenDigital)",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to 22.10"
      }
    ]
  },
  {
    "defaultStatus": "unaffected",
    "platforms": [
      "Windows"
    ],
    "product": "AVG Antivirus",
    "vendor": "NortonLifelock (GenDigital)",
    "versions": [
      {
        "status": "affected",
        "version": "Prior to 22.10"
      }
    ]
  }
]

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.1%

Related for CVELIST:CVE-2022-4294