Known vulnerabilities in Avast Antivirus

Vendor: Avast Software s.r.o.
Software: Avast Antivirus
Software CPE: cpe:2.3:a:avast_software_s.r.o.:avast_antivirus:*:*:*:*:*:*:*:*
Website: https://www.avast.com/index2?utm_expid=.o3Qid4rtTFWvM4Oy2-KO3A.1&utm_referrer=https%3A%2F%2Fwww.google.com%2F#pc
Total vulnerabilities: 21
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Avast Antivirus Avast Antivirus is affected by 21 known vulnerabilities: 3 high, 5 medium, 13 low Critical High Medium Low

Vulnerabilities (21)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU119252 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-10905		 CWE-362 Low
No
No
 25.9.10453 08.12.2025 SB2025120812
#VU119251 - Time-of-check Time-of-use (TOCTOU) Race Condition
CVE-2025-13032		 CWE-367 Low
No
No
 25.3.9983 08.12.2025 SB2025120811
#VU107930 - Integer overflow
CVE-2025-3500		 CWE-190 Low
No
No
 25.3.9983 25.04.2025 SB2025042502
#VU95569 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-7227		 CWE-59 Low
No
No
 24.7.9311 08.08.2024 SB2024080849
#VU95568 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-7232		 CWE-59 Low
No
No
 24.7.9311 08.08.2024 SB2024080849
#VU95567 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-7233		 CWE-59 Low
No
No
 24.7.9311 08.08.2024 SB2024080849
#VU95566 - Improper Link Resolution Before File Access ('Link Following')
CVE-2024-7228		 CWE-59 Low
No
No
 24.7.9311 08.08.2024 SB2024080849
#VU70525 - Absolute Path Traversal
CVE-2022-4173		 CWE-36 Low
Available
No
 22.10 28.12.2022 SB2022122815
#VU62829 - Permissions, Privileges, and Access Controls
CVE-2022-26523		 CWE-264 Low
No
No
 22.1 05.05.2022 SB2022050523
#VU62828 - Permissions, Privileges, and Access Controls
CVE-2022-26522		 CWE-264 Low
No
No
 22.1 05.05.2022 SB2022050523
#VU26547 - Improper Access Control
CVE-2020-10868		 CWE-284 Medium
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26544 - Improper Access Control
CVE-2020-10867		 CWE-284 High
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26543 - Improper Access Control
CVE-2020-10866		 CWE-284 High
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26542 - Improper input validation
CVE-2020-10864		 CWE-20 Medium
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26541 - Improper input validation
CVE-2020-10863		 CWE-20 Medium
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26540 - Permissions, Privileges, and Access Controls
CVE-2020-10862		 CWE-264 Low
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26539 - Improper Access Control
CVE-2020-10861		 CWE-284 Medium
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26538 - Memory corruption
CVE-2020-10860		 CWE-119 Medium
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU26537 - Improper Access Control
CVE-2020-10865		 CWE-284 High
No
No
 20.1.2397 02.04.2020 SB2020040213
#VU22526 - Improper Link Resolution Before File Access ('Link Following')
CVE-2019-11230		 CWE-59 Low
No
No
 19.4.2374 05.11.2019 SB2019110508


Showing elements 1 - 20 out of 21