Описание
Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.
Ссылки
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- Vendor Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- ExploitThird Party Advisory
- Vendor Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 20.4 (исключая)
cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*
EPSS
Процентиль: 22%
0.0007
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
NVD-CWE-Other
Связанные уязвимости
CVSS3: 7.8
github
около 4 лет назад
Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.
EPSS
Процентиль: 22%
0.0007
Низкий
7.8 High
CVSS3
7.2 High
CVSS2
Дефекты
NVD-CWE-Other