CVE-2022-4294 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation

Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an application or us...

PT-2023-14444 · Avira · Avira Security For Windows

Name of the Vulnerable Software and Affected Versions: Avira Security for Windows versions prior to 1.1.78 Description: The issue is related to an unquoted service path in Avira Security for Windows, which allows attackers with local administrative privileges to cause a Denial of Service...

Avira Security 代码问题漏洞

Avira Security is a software suite from the German company Avira. It includes antivirus protection, ransomware protection, and more. A security vulnerability exists in Avira Security for Windows that originates from the inclusion of an unreferenced service path, resulting in a denial of service...

PT-2022-6221 · Avg +3 · Avg Antivirus +3

Name of the Vulnerable Software and Affected Versions: Avast Antivirus affected versions not specified Avira Antivirus affected versions not specified AVG Antivirus affected versions not specified Norton Antivirus affected versions not specified Description: The issue is related to a Privilege...

The vulnerability of Avira Security’s update function allows attackers to enhance their privileges.

The vulnerability of Avira Security’s update function is related to the possibility of downloading arbitrary files. Exploiting this vulnerability can allow a hacker to increase their privileges...

Exploit for Incorrect Default Permissions in Avira Avira_Security

CVE-2022-3368 PoC for arbitrary file move vulnerability in So...

CVE-2022-3368

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...

CVE-2022-3368

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...

Design/Logic Flaw

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...

CVE-2022-3368 Software Updater of Avira Security for Windows vulnerable to Privilege Escalation

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...

CVE-2022-3368 Software Updater of Avira Security for Windows vulnerable to Privilege Escalation

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556...

CVE-2022-3368

CVE-2022-3368 affects Avira Security for Windows, specifically the Software Updater component. A write-access path issue allows an attacker to escalate privileges in certain scenarios by abusing how downloaded files are stored during updates. The vulnerability was fixed in Avira Security version ...

Avira Security 安全漏洞

Avira Security is a software suite from the German company Avira. It includes antivirus protection, ransomware protection, and more. A security vulnerability exists in Avira Security for Windows prior to version 1.1.72.30556, which stems from a software updater feature that allows an attacker wit...

PT-2022-5144 · Avira · Avira Security

Name of the Vulnerable Software and Affected Versions: Avira Security versions prior to 1.1.72.30556 Description: The issue is related to the Software Updater functionality of Avira Security, which allows an attacker with write access to the filesystem to escalate their privileges in certain...

CVE-2022-28795

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...

CVE-2022-28795

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...

CVE-2022-28795

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...

Design/Logic Flaw

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...

CVE-2022-28795

CVE-2022-28795 affects Avira Password Manager Browser Extensions (Chrome, Edge, Opera, Firefox, Safari). A loophole could allow an attacker-supplied page to trigger the extension to autofill the password field, enabling access via JavaScript. The issue was fixed in extensions version 2.18.5 (Chro...

CVE-2022-28795

A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An attacker could then...