CVE-2026-80301

Improper isolation in the Avast sandbox on Windows allows a local, low-privileged attacker executing inside the sandbox to access COM interfaces to the Task Scheduler service, escape containment, and execute code with elevated privileges outside the sandbox. The sandbox virtualizes file system an...

PrettyPrague

PrettyPrague GenDigital Avast Antivirus ゼロデイ権限昇格の脆弱性 アンチマルウェアベンダーにおけるもう一つのゼロデイ脆弱性です。確信はありませんが、この脆弱性は他のGenDigital製品（AVG、Nortonなど）にも影響する可能性があると考えています。 現時点では、PoCはAvast Antivirusの任意のバージョンと互換性があります。 このPoCは、Avast Sandboxの脆弱性を悪用してSAMデータベースをダンプし、完全なSYSTEMシェルを起動します。本稿執筆時点では、このPoCは完全にパッチ適用済みのAvast Antiviru...

PT-2026-93757

Name of the Vulnerable Software and Affected Versions Avast sandbox driver aswSnx.sys affected versions not specified Description Improper preservation of permissions in the aswSnx.sys minifilter driver on Windows allows a local, low-privileged attacker operating within the sandbox to escape file...

CVE-2026-82964: Improper Preservation of Permissions

Improper preservation of permissions in the Avast sandbox minifilter driver aswSnx.sys on Windows allows a local, low-privileged attacker executing inside the sandbox to escape file isolation and escalate to SYSTEM. When the sandbox virtualizes a file it copies the original security descriptor, b...

Avast Sandbox Privilege Escalation

The vulnerability of the Avast Sandbox component of the Avast antivirus protection software is related to insecure management of privileges. Exploiting this vulnerability can allow a hacker to elevate their privileges to the SYSTEM level...

PT-2026-84873

Уязвимость компонента Avast Sandbox средства антивирусной защиты Avast Antivirus связана с небезопасным управлением привилегиями. Эксплуатация уязвимости может позволить нарушителю повысить свои привилегии до уровня SYSTEM...