An issue was discovered in Avast Antivirus before 20

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion

A Cross Site Scripting (XSS) issue exists in Avast AntiVirus (Free, Internet Security, and Premiere Edition) 19.3.2369 build 19.3.4241.440 in the Network Notification Popup,…

An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash the application…

Uninitialized variable in digital signiture verification may crash the application

Out of Bounds write on scan of malformed Mach-O file may crash the application

Out of Bounds write on scan of malformed eml file may crash the application

Buffer Overflow vulnerability in Avast AntiVirus before v.19.7 allows a local attacker to cause a denial of service via a crafted request to the aswSnx.sys driver

Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface

An issue was discovered in the Login Password feature of the Password Manager component in Avast Antivirus 20.1.5069.562

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation

In Avast Antivirus before 19.4, a local administrator can trick the product into renaming arbitrary files by replacing the Logs\Update.log file with a symlink