Avast Antivirus Local Elevation of Privilege Vulnerability (CNVD-2020-22014)

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in the Avast Service AvastSvc.exe in versions prior to Avast Antivirus 20. An attacker can exploit the vulnerability to elevate privileg...

Unspecified Vulnerability in Avast Antivirus

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. The vulnerability can be exploited by an attacker to bypass security restrictions with the...

Unspecified Vulnerability in Avast Antivirus (CNVD-2020-22017)

Avast Antivirus is a suite of antivirus software from the Czech company Avast. A security vulnerability exists in the aswTask RPC endpoint of the TaskEx library in versions prior to Avast Antivirus 20. The vulnerability can be exploited to make arbitrary changes to the Components section of the...

Avast Antivirus Input Validation Error Vulnerability (CNVD-2020-22015)

Avast Antivirus is a suite of antivirus software from the Czech company Avast. An input validation error vulnerability exists in the aswTask RPC endpoint of the TaskEx library in previous versions of Avast Antivirus 20. An attacker can exploit this vulnerability to shut down the system with a...

CVE-2020-10866

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to enumerate the network interfaces and access points from a Low Integrity process via RPC...

CVE-2020-10864

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a reboot via RPC from a Low Integrity process...

CVE-2020-10863

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine...

CVE-2020-10862

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Local Privilege Escalation LPE via RPC...

Privilege escalation

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Local Privilege Escalation LPE via RPC...

CVE-2020-10862: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Local Privilege Escalation LPE via RPC...

PT-2020-12382

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to trigger a shutdown via RPC from a Low Integrity process. This is achieved by exploiting the aswTask RPC endpoint for the TaskEx library in the...

PT-2020-12387

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to launch the Repair App RPC call from a Low Integrity process through the aswTask RPC endpoint for the TaskEx library in the Avast Service...

CVE-2020-10863: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a shutdown via RPC from a Low Integrity process via TempShutDownMachine...

CVE-2020-10864: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to trigger a reboot via RPC from a Low Integrity process...

PT-2020-12386

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to bypass intended access restrictions on tasks from an untrusted process when Self Defense is enabled, by exploiting the aswTask RPC endpoint for t...

PT-2020-12381

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue in Avast Antivirus allows attackers to achieve Local Privilege Escalation via the aswTask RPC endpoint for the TaskEx library in the Avast Service. The endpoint "aswTask" is vulnerable,...

CVE-2020-10861: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to achieve Arbitrary File Deletion from Avast Program Path via RPC, when Self Defense is Enabled...

PT-2020-12380

Name of the Vulnerable Software and Affected Versions Avast Antivirus versions prior to 20 Description An issue was discovered that allows attackers to achieve arbitrary file deletion from the Avast program path via the aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe...

CVE-2020-10866: Inadequate Encryption Strength

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to enumerate the network interfaces and access points from a Low Integrity process via RPC...

CVE-2020-10868: Undefined Security Weakness

An issue was discovered in Avast Antivirus before 20. The aswTask RPC endpoint for the TaskEx library in the Avast Service AvastSvc.exe allows attackers to launch the Repair App RPC call from a Low Integrity process...