Approved changes feed: RSS · Atom

cpe:2.3:a:avira:free_antivirus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAvira (d2f4bdaf-87bb-59b1-bc66-93d44750e024)
ProductFree Antivirus (b1522311-57f8-5c05-a2b8-dc2c7988060e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-8961 vulnerable 2026-06-03 14:43:12.223318 Details available
An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a file at a specific location, and pass this event to the driver, thereby defeating the anti-virus functionality.
Published: 2020-04-09T19:54:59.000Z
Updated: 2024-08-04T10:19:19.418Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12680 vulnerable 2026-06-03 14:41:35.101933 Details available
Avira Free Antivirus through 15.0.2005.1866 allows local users to discover user credentials. The functions of the executable file Avira.PWM.NativeMessaging.exe are aimed at collecting credentials stored in Chrome, Firefox, Opera, and Edge. The executable does not verify the calling program and thus a request such as fetchChromePasswords or fetchCredentials will succeed. NOTE: some third parties have stated that this is "not a vulnerability.
Published: 2020-05-08T12:02:43.000Z
Updated: 2024-08-04T12:04:22.548Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.