VULNERABILITY INTELLIGENCE

CVE-2026-27750

CVSS score8.5 HIGH
EPSS probability0.84%
CISA KEVNot currently listed
Published2026-03-05
Last modified2026-06-17

Description

Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without revalidating the target …