Skip to main content

Avast CVE-2022-28964

HIGH
Untrusted Search Path (CWE-426)
2022-05-20 cve@mitre.org
7.1
CVSS 3.1 · NVD
Share

Severity by source

NVD PRIMARY
7.1 HIGH
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
None
Integrity
High
Availability
High

Lifecycle Timeline

1
CVE Published
May 20, 2022 - 02:15 nvd
HIGH 7.1

DescriptionNVD

An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) via a crafted DLL file.

AnalysisAI

An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) via a crafted DLL file. Rated high severity (CVSS 7.1), this vulnerability is no authentication required, low attack complexity. No vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-426. An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a Denial of Service (DoS) via a crafted DLL file. Affected products include: Avast Premium Security.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Avast

View all
CVE-2017-8307 CRITICAL POC
9.8 Apr 27

In Avast Antivirus before v17, using the LPC interface API exposed by the AvastSVC.exe Windows service, it is possible t

CVE-2020-10867 CRITICAL POC
9.8 Apr 01

An issue was discovered in Avast Antivirus before 20. Rated critical severity (CVSS 9.8), this vulnerability is remotely

CVE-2021-45337 HIGH POC
8.8 Dec 27

Privilege escalation vulnerability in the Self-Defense driver of Avast Antivirus prior to 20.8 allows a local user with

CVE-2021-45336 HIGH POC
8.8 Dec 27

Privilege escalation vulnerability in the Sandbox component of Avast Antivirus prior to 20.4 allows a local sandboxed co

CVE-2021-45335 HIGH POC
8.8 Dec 27

Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to con

CVE-2025-71326 HIGH POC
8.5 Jun 19

Local privilege escalation in Avast Antivirus 25.11 allows non-privileged Windows users to execute arbitrary code as SYS

CVE-2016-3986 HIGH POC
7.8 Apr 12

Avast allows remote attackers to cause a denial of service (memory corruption) and possibly execute arbitrary code via a

CVE-2015-8620 HIGH POC
7.8 Apr 13

Heap-based buffer overflow in the Avast virtualization driver (aswSnx.sys) in Avast Internet Security, Pro Antivirus, Pr

CVE-2021-45339 HIGH POC
7.8 Dec 27

Privilege escalation vulnerability in Avast Antivirus prior to 20.4 allows a local user to gain elevated privileges by "

CVE-2021-45338 HIGH POC
7.8 Dec 27

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privi

CVE-2020-10862 HIGH POC
7.8 Apr 01

An issue was discovered in Avast Antivirus before 20. Rated high severity (CVSS 7.8), this vulnerability is low attack c

CVE-2019-17093 HIGH POC
7.8 Oct 23

An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. Rated high severity (CVSS 7.8), th

Share

CVE-2022-28964 vulnerability details – vuln.today

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy