CVE-2023-1585: Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary…

PriorityP430medium6.3CVSS 3.1

AVLACHPRLUINSUCNIHAH

EPSS

0.17%

6.3th percentile

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the Quarantine process, leading to arbitrary file/directory deletion. The issue was fixed with Avast and AVG Antivirus version 22.11 and virus definitions from 14 February 2023 or later.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
avast	antivirus	>= 22.5 < 22.11	22.11
avast	avast_antivirus	22.5 – 22.10	—
avg	anti-virus	>= 22.5 < 22.11	22.11
avg	avg_antivirus	22.5 – 22.10	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.