Approved changes feed: RSS · Atom

cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvast (4c8df0f0-33ca-51f5-97dc-96fe6233c2d2)
ProductAntivirus (2e3dbe78-0338-56d7-8a70-fef3ca55d483)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-8351 vulnerable 2026-06-08 07:45:20.030028 db.gcve.eu details are currently unavailable. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-7007 vulnerable 2026-06-08 07:43:17.884225 Null pointer dereference in Avast Antivirus on macOS (16.0.0) or Linux (3.0.3)
HIGH (7.5)
NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus process to crash.This issue affects Antivirus: 16.0.0; Anitvirus: 3.0.3.
Published: 2025-12-01T16:34:22.029Z
Updated: 2025-12-01T17:08:55.389Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-3500 vulnerable 2026-06-08 07:23:09.004005 Integer Overflow in Avast Antiviurs 25.1.981.6 on Windows may result in privilege escalation
CRITICAL (9)
Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.6 before 25.3.
Published: 2025-12-01T16:09:00.428Z
Updated: 2026-02-26T16:57:50.209Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-13032 vulnerable 2026-06-08 07:04:31.481972 Details available
CRITICAL (9.9)
Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.
Published: 2025-11-11T16:16:33.666Z
Updated: 2025-11-14T19:27:08.451Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-10101 vulnerable 2026-06-08 07:02:26.300649 Avast antivirus heap buffer OOB read when scanning a malformed Mach-O file
HIGH (7.8)
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Execution of Code or Denial-of-Service of the antivirus process. This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25090300. The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2025-12-01T15:32:31.678Z
Updated: 2026-06-12T22:34:05.090Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-5102 vulnerable 2026-06-08 06:56:14.911722 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1587 vulnerable 2026-06-08 05:52:36.160742 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1586 vulnerable 2026-06-08 05:52:36.160223 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1585 vulnerable 2026-06-08 05:52:36.158550 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-4294 vulnerable 2026-06-08 05:51:37.142176 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45339 vulnerable 2026-06-08 05:36:48.042196 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45338 vulnerable 2026-06-08 05:36:48.041796 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45337 vulnerable 2026-06-08 05:36:48.041368 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45336 vulnerable 2026-06-08 05:36:48.041036 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-45335 vulnerable 2026-06-08 05:36:48.040437 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-20118 vulnerable 2026-06-08 05:21:03.918706 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10868 vulnerable 2026-06-08 05:16:35.975967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10867 vulnerable 2026-06-08 05:16:35.975643 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10866 vulnerable 2026-06-08 05:16:35.975309 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10865 vulnerable 2026-06-08 05:16:35.974967 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10864 vulnerable 2026-06-08 05:16:35.974628 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10863 vulnerable 2026-06-08 05:16:35.974291 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10862 vulnerable 2026-06-08 05:16:35.973937 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10861 vulnerable 2026-06-08 05:16:35.973571 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-10860 vulnerable 2026-06-08 05:16:35.973094 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-17093 vulnerable 2026-06-08 05:13:09.918513 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11230 vulnerable 2026-06-08 05:12:36.679935 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8308 vulnerable 2026-06-08 05:10:08.037833 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-8307 vulnerable 2026-06-08 05:10:08.037339 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.