VULNERABILITY INTELLIGENCE

CVE-2021-45338

CVSS score7.8 HIGH
EPSS probability0.39%
CISA KEVNot currently listed
Published2021-12-27
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.

Weakness classification

  • nvd@nist.gov: NVD-CWE-Other

Primary references