VULNERABILITY INTELLIGENCE
CVE-2026-27750
CVSS score8.5 HIGH
EPSS probability0.84%
CISA KEVNot currently listed
Published2026-03-05
Last modified2026-06-17
Description
Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target …