CVE-2023-36168

CVE-2023-36168 An issue in AVG AVG Anti-Spyware v.7.5 allows an attacker to execute arbitrary code via a crafted script to the guard.exe component Exploit Title: AVG Anti Spyware 7.5 - Unquoted Service Path Date: 05/08/2023 Exploit Author: Idan Malihi Vendor Homepage: https://www.avg.com Software...

CVE-2026-6064

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder...

EUVD-2026-111873

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder...

CVE-2026-6064 Norton, Avast, and AVG local privilege escalation via link following in Data Shredder

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder...

CVE-2026-6064

A link following vulnerability (CWE-59) in the Data Shredder components of Norton Antivirus , Avast Antivirus , and AVG Internet Security on Windows allows for local privilege escalation . Affected versions are those prior to 26.5.10933 . A local, low-privileged attacker can escalate privileges t...

CVE-2026-6064: Gen Digital: Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet…

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder...

PT-2026-128093

Link following vulnerability in Data Shredder components in Norton Antivirus, Avast Antivirus, and AVG Internet Security prior to 26.5.10933 on Windows allows a local, low-privileged attacker to escalate privileges to SYSTEM. During a privileged shred operation, enabling arbitrary file/folder...

Gen Digital Norton Antivirus backlink vulnerability

Versions prior to Gen Digital Norton Antivirus 26.5.10933, Avast Antivirus 26.5.10933, and AVG Internet Security 26.5.10933 contain a post-link vulnerability. This vulnerability stems from a link-following flaw in the Data Shredder component, allowing local attackers with low privileges to delete...

AVG Internet Security avgToolsSvc Link Following Local Privilege Escalation Vulnerability

This vulnerability allows local attackers to escalate privileges on affected installations of AVG Internet Security. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability. The specific flaw exists within the avgToolsSv...

Astra Linux – vulnerability in libde265

Libde265 v1.0.8 was found to contain a heap-buffer-overflow vulnerability in fallback-motion.cc via putweightedpredavg16fallback. This vulnerability enables attackers to trigger a Denial of Service DoS condition by using a specially crafted video file...

PT-2026-97815

Name of the Vulnerable Software and Affected Versions libvips version 8.19.0 Description A memory access issue occurs when processing little-endian PFM images. If the PFM text header length is not a multiple of four bytes, the mmap-based loader may expose pixel data at an address not properly...

Malicious code in imugiay-avg-dudafgacvsigai (npm)

Source: amazon-inspector 344079ac5b32958f33aa06c802681bb7db93330a36216e182eda392e3c294866 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-ddafgi (npm)

Source: amazon-inspector 3d0178294d148922a29cd2d674a90023b67d1bdf7a7ab53f62ad56105bbc3476 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-daiugadajuij (npm)

Source: amazon-inspector c33be95a7c59e4bf89469a50eacc1cb34cacedd55f448b83554306515f5efcff This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-dudafgoacvigai (npm)

Source: amazon-inspector cde52d37a8fc94cdb70e1a373df8f10c0db86fb91d06fbb14b3fe0af8d328dde This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-dnieamnfaupa (npm)

Source: amazon-inspector f59f10407671085a032b96d070aecfa44934d732d29795712eed971b5c4c553b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-daigajuj (npm)

Source: amazon-inspector 60f8d9bf88172011d98730eecc58b4fda1a51688622ca3edaffe2b4b62d5472b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-dudafagi (npm)

Source: amazon-inspector 0c4fa7cf6e1e32f80c12ab5905216c0d2078b7539e6db0c21bcfede634ccde5d This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-dudafigai (npm)

Source: amazon-inspector 286d228974d7a44e709bdc285b6d30160be951c7a32cfa8af83ad42f3386d7fe This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...

Malicious code in imugiay-avg-dniemnf (npm)

Source: amazon-inspector b8e8b1658f7d7c1024f68fbcad6c10e0883d2b83bd3893f728d8ad70b270db2b This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js, autopublish.js, autopublish2.js, autopublish3.js designed ...