Avast

Avast Antivirus

9 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.5

CVE-2025-71326

Exploit
  • EPSS 0.13%
  • Veröffentlicht 19.06.2026 14:16:54
  • Zuletzt bearbeitet 23.06.2026 15:37:54

AVAST Antivirus 25.11 contains an unquoted service path vulnerability in the SecureLine service that allows local non-privileged users to execute code with elevated SYSTEM privileges. Attackers can exploit the unquoted binary path in the service conf...

5.5

CVE-2025-7006

  • EPSS 0.11%
  • Veröffentlicht 12.06.2026 22:16:48
  • Zuletzt bearbeitet 15.06.2026 20:49:19

Use of stack memory after free vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast...

7.8

CVE-2025-7008

  • EPSS 0.15%
  • Veröffentlicht 12.06.2026 22:16:48
  • Zuletzt bearbeitet 15.06.2026 20:49:19

Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Ant...

6.4

CVE-2015-5662

  • EPSS 2.97%
  • Veröffentlicht 18.10.2015 10:59:02
  • Zuletzt bearbeitet 06.05.2026 22:30:45

Directory traversal vulnerability in Avast before 150918-0 allows remote attackers to delete or write to arbitrary files via a crafted entry in a ZIP archive.

6.8

CVE-2008-6846

  • EPSS 3.69%
  • Veröffentlicht 02.07.2009 10:30:00
  • Zuletzt bearbeitet 16.06.2026 23:03:05

Multiple stack-based buffer overflows in avast! Linux Home Edition 1.0.5, 1.0.5-1, and 1.0.8 allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via a malformed (1) ISO or (2) RPM file.

9.3

CVE-2008-5523

  • EPSS 2.9%
  • Veröffentlicht 12.12.2008 18:30:02
  • Zuletzt bearbeitet 16.06.2026 23:00:28

avast! antivirus 4.8.1281.0, when Internet Explorer 6 or 7 is used, allows remote attackers to bypass detection of malware in an HTML document by placing an MZ header (aka "EXE info") at the beginning, and modifying the filename to have (1) no extens...

9.3

CVE-2007-2845

  • EPSS 6.28%
  • Veröffentlicht 24.05.2007 18:30:00
  • Zuletzt bearbeitet 16.06.2026 22:40:32

Heap-based buffer overflow in the CAB unpacker in avast! Anti-Virus Managed Client before 4.7.700 allows user-assisted remote attackers to execute arbitrary code via a crafted CAB archive, resulting from an "integer cast around".

7.8

CVE-2007-1673

Exploit
  • EPSS 3.18%
  • Veröffentlicht 09.05.2007 01:19:00
  • Zuletzt bearbeitet 16.06.2026 22:38:05

unzoo.c, as used in multiple products including AMaViS 2.4.1 and earlier, allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.

7.8

CVE-2007-1672

Exploit
  • EPSS 3.18%
  • Veröffentlicht 09.05.2007 00:19:00
  • Zuletzt bearbeitet 16.06.2026 22:38:05

avast! antivirus before 4.7.981 allows remote attackers to cause a denial of service (infinite loop) via a ZOO archive with a direntry structure that points to a previous file.