Avast Premium Security — known CVE vulnerabilities

Every CVE whose affected-product data names Avast Premium Security, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (6)

• CVE-2019-18894 — CVSS 7.8 (high): In Avast Premium Security 19.8.2393, attackers can send a specially crafted request to the local web server run by Avast Antivirus on port…
• CVE-2023-42124 — CVSS 7.8 (high): Avast Premium Security Sandbox Protection Incorrect Authorization Privilege Escalation Vulnerability. This vulnerability allows local…
• CVE-2023-42125 — CVSS 7.8 (high): Avast Premium Security Sandbox Protection Link Following Privilege Escalation Vulnerability. This vulnerability allows local attackers to…
• CVE-2022-28964 — CVSS 7.1 (high): An arbitrary file write vulnerability in Avast Premium Security before v21.11.2500 (build 21.11.6809.528) allows attackers to cause a…
• CVE-2022-28965 — CVSS 6.5 (medium): Multiple DLL hijacking vulnerabilities via the components instup.exe and wsc_proxy.exe in Avast Premium Security before v21.11.2500 allows…
• CVE-2021-27241 — CVSS 6.1 (medium): This vulnerability allows local attackers to delete arbitrary directories on affected installations of Avast Premium Security 20.8.2429…