Avast Avg Antivirus vulnerabilities

CVE-2022-4173 [HIGH] CWE-269 CVE-2022-4173: A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attac A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.

CVE-2023-5760 [HIGH] CWE-367 CVE-2023-5760: A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. Th A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vulnerability which can be further exploited, allowing an attacker to gain full local privilege escalation on the system.This issue affects Avast/Avg Antivirus: 23.8.

CVE-2020-13657 [MEDIUM] CVE-2020-13657: An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before An elevation of privilege vulnerability exists in Avast Free Antivirus and AVG AntiVirus Free before 20.4 due to improperly handling hard links. The vulnerability allows local users to take control of arbitrary files.