VULNERABILITY INTELLIGENCE

CVE-2022-4173

CVSS score7.3 HIGH
EPSS probability0.73%
CISA KEVNot currently listed
Published2022-12-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Description

A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.

Weakness classification

  • CWE-269: Improper Privilege Management

Primary references