Norton Antivirus
Approved changes feed: RSS · Atom
cpe:2.3:a:gen_digital:norton_antivirus:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Gen Digital (99281401-5284-550a-89e3-b841eaca51f8) |
|---|---|
| Product | Norton Antivirus (c52bc46d-2658-50de-83b1-37ef0e08a4bb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-7019 |
vulnerable | 2026-07-29 00:18:08.449913 |
Avast antivirus stack overflow when scanning a malformed Office Open XML file
MEDIUM (5.5)
Stack overflow vulnerability in Avast Antivirus when scanning a malformed Office Open XML file may allow Denial-of-Service of the antivirus process.
This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25020100.
The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:14:19.144Z
Updated: 2026-06-15T18:11:31.712Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7011 |
vulnerable | 2026-07-29 00:18:08.430669 |
Avast antivirus heap OOB when scanning a malformed zip file
HIGH (7.8)
Heap out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed zip file containing XML may allow Local Execution of Code or Denial-of-Service of the antivirus process.
This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds from 25020100 before 25021208.
The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:12:37.444Z
Updated: 2026-06-15T16:02:44.849Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7010 |
vulnerable | 2026-07-29 00:18:08.430184 |
Avast antivirus stack overflow when scanning a malformed PDF file
MEDIUM (5.5)
Stack overflow vulnerability due to uncontrolled recursion in Avast Antivirus when scanning a malformed PDF file may allow Denial-of-Service of the antivirus process.
This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021208.
The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:11:22.855Z
Updated: 2026-06-15T17:11:01.415Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7009 |
vulnerable | 2026-07-29 00:18:08.429431 |
Avast antivirus heap buffer OOB read when scanning a malformed PE file
HIGH (7.8)
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file may allow Local Execution of Code or Denial-of-Service of the antivirus process.
This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021310.
The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:10:26.925Z
Updated: 2026-06-15T17:11:31.580Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7008 |
vulnerable | 2026-07-29 00:18:08.428565 |
Avast antivirus heap buffer OOB read when scanning a malformed PE file
HIGH (7.8)
Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Windows PE file with .NET metadata may allow Local Execution of Code or Denial-of-Service of the antivirus process.
This issue affects Avast Antivirus, AVG Antivirus, Norton Antivirus, Avast One, and Avast Business Antivirus on Windows, macOS, and Linux for virus definition builds before VPS 25021310.
The affected scanning logic is delivered through a shared Gen Digital virus definition update stream. The same stream feeds the consumer antivirus products listed in this advisory and other Gen Digital products that embed the same engine. Mitigation flows through this update channel; installations at or above the listed build are not vulnerable regardless of which product consumes the stream.
Published: 2026-06-12T22:09:49.037Z
Updated: 2026-06-15T17:11:56.726Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7006 |
vulnerable | 2026-07-29 00:18:08.422266 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7005 |
vulnerable | 2026-07-29 00:18:08.421472 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-7004 |
vulnerable | 2026-07-29 00:18:08.409042 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.