CVE-2023-1586: Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file…

PriorityP421medium4.7CVSS 3.1

AVLACHPRLUINSUCNIHAN

EPSS

0.21%

11.2th percentile

Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file creation. The issue was fixed with Avast and AVG Antivirus version 22.11

Affected

4 ranges

Vendor	Product	Version range	Fixed in
avast	antivirus	>= 22.5 < 22.11	22.11
avast	avast_antivirus	22.5 – 22.10	—
avg	anti-virus	>= 22.5 < 22.11	22.11
avg	avg_antivirus	22.5 – 22.10	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.