CVE-2020-13657

published 2020-06-29

CVE-2020-13657: An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The…

Priority P4 26 medium 5.5 CVSS 3.1

AV L AC L PR L UI N S U C N I H A N

An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
avast	avg_antivirus	< 20.4	20.4
avast	free_antivirus	< 20.4	20.4

CVSS provenance

nvd v3.1 5.5 MEDIUM CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 2.1 LOW AV:L/AC:L/Au:N/C:N/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-269