Avast Antivirus
38 CVEs tracked. None of them is in CISA KEV.
This hub aggregates every CVE we track for Avast Antivirus, a product in the security products space. Use it to gauge the current risk picture and drill into individual advisories.
Avast Antivirus CVEs per month
| Month | CVEs |
|---|---|
| 2024-10 | 0 |
| 2024-11 | 0 |
| 2024-12 | 0 |
| 2025-01 | 0 |
| 2025-02 | 0 |
| 2025-03 | 0 |
| 2025-04 | 0 |
| 2025-05 | 0 |
| 2025-06 | 0 |
| 2025-07 | 0 |
| 2025-08 | 0 |
| 2025-09 | 0 |
| 2025-10 | 0 |
| 2025-11 | 0 |
| 2025-12 | 1 |
| 2026-01 | 0 |
| 2026-02 | 0 |
| 2026-03 | 0 |
| 2026-04 | 0 |
| 2026-05 | 1 |
| 2026-06 | 9 |
| 2026-07 | 0 |
| 2026-08 | 0 |
| 2026-09 | 0 |
Severity
How the 38 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.
- Critical4
- High18
- Medium16
Latest CVEs
The 15 most recently published vulnerabilities affecting Avast Antivirus.
- CVE-2025-71326AVAST Antivirus 25.11 Unquoted Service Path Privilege Escalation7.8
- CVE-2025-7019Avast antivirus stack overflow when scanning a malformed Office Open XML file5.5
- CVE-2025-7011Avast antivirus heap OOB when scanning a malformed zip file7.8
- CVE-2025-7010Avast antivirus stack overflow when scanning a malformed PDF file5.5
- CVE-2025-7009Avast antivirus heap buffer OOB read when scanning a malformed PE file7.8
- CVE-2025-7008Avast antivirus heap buffer OOB read when scanning a malformed PE file7.8
- CVE-2025-7006Avast antivirus use of stack memory after free when scanning a malformed PE file5.5
- CVE-2025-7005Avast antivirus infinite recursion when scanning a malformed PE file5.5
- CVE-2025-7004Avast antivirus heap buffer OOB write when scanning a malformed PE file7.8
- CVE-2022-26522The socket connection handler in aswArPot.sys in the Avast and AVG Windows Anti Rootkit driver before 22.1 allows local attackers to execute arbitrary code in kernel mode or cause a denial of servi...7.8
- CVE-2025-10101Avast antivirus heap buffer OOB read when scanning a malformed Mach-O file7.8
- CVE-2023-1587Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus version 22.115.8
- CVE-2023-1586Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast...6.5
- CVE-2023-1585Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fi...6.5
- CVE-2022-4294Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation7.1
Product grouping is registry-driven, with AI assist and human review. How it works