avira vulnerabilities

Products

• antivir 10
• antivir personal 8
• antivirus 3
• av pack 3
• avira security 3
• internet security 3
• antivir security suite 2
• free antivirus 2
• free security suite 2
• Prime 2
• software updater 2
• antivir mailgate 1
• antivir mailgate suite 1
• antivir professional 1
• antivir sharepoint 1
• antivir webgate 1
• antivir webgate suite 1
• Antivirus Free Antivirus 1
• antivirus server 1
• Avira Antivirus 1
• avira mobile security 1
• avira prime 1
• avira secure backup 1
• desktop 1
• exchange security 1
• internet security suite 1
• management console 1
• optimization suite 1
• password manager 1
• phantom vpn 1

Latest avira CVEs

Newest publication first · page 1 of 2

1. CVE-2026-27748 Avira Internet Security Arbitrary File Deletion via Improper Link Resolution

   Published 2026-03-05

   High·CVSS 7.1 EPSS 0.19%

   Avira Internet Security contains an improper link resolution vulnerability in the Software Updater component. During the update process, a privileged service running as SYSTEM deletes a file under C:\ProgramData without validating whether the path resolves through a symbolic link...

2. CVE-2026-27749 Avira Internet Security System Speedup Insecure Deserialization

   Published 2026-03-05

   High·CVSS 7.8 EPSS 0.36%

   Avira Internet Security contains a deserialization of untrusted data vulnerability in the System Speedup component. The Avira.SystemSpeedup.RealTimeOptimizer.exe process, which runs with SYSTEM privileges, deserializes data from a file located in C:\ProgramData using .NET BinaryF...

3. CVE-2026-27750 Avira Internet Security Optimizer TOCTOU

   Published 2026-03-05

   High·CVSS 7.0 EPSS 0.11%

   Avira Internet Security contains a time-of-check time-of-use (TOCTOU) vulnerability in the Optimizer component. A privileged service running as SYSTEM identifies directories for cleanup during a scan phase and subsequently deletes them during a separate cleanup phase without reva...

4. CVE-2024-13759 Local Privilege Escalation in Avira Prime 1.1.96.2 on Windows 10 x64

   Published 2025-05-09

   High·CVSS 7.8 EPSS 0.22%

   Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64 allows local attackers to gain system-level privileges via arbitrary file deletion

5. CVE-2023-51636 Avira Prime Link Following Local Privilege Escalation Vulnerability

   Published 2024-05-22

   High·CVSS 7.8 EPSS 0.96%

   Avira Prime Link Following Local Privilege Escalation Vulnerability. This vulnerability allows local attackers to escalate privileges on affected installations of Avira Prime. An attacker must first obtain the ability to execute low-privileged code on the target system in order t...

6. CVE-2023-36673 An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plai...

   Published 2023-08-09

   High·CVSS 7.3 EPSS 0.53%

   An issue was discovered in Avira Phantom VPN through 2.23.1 for macOS. The VPN client insecurely configures the operating system such that all IP traffic to the VPN server's IP address is sent in plaintext outside the VPN tunnel, even if this traffic is not generated by the VPN c...

7. CVE-2023-1900 A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-servic...

   Published 2023-04-19

   Medium·CVSS 5.5 EPSS 0.30%

   A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on the heap and lead to a denial-of-service situation. Issue was fixed with Endpointprotection.exe version 1.0.2303.633

8. CVE-2022-4429 Avira Security for Windows - Denial of Service

   Published 2023-01-10

   Medium·CVSS 4.4 EPSS 0.15%

   Avira Security for Windows contains an unquoted service path which allows attackers with local administrative privileges to cause a Denial of Service. The issue was fixed with Avira Security version 1.1.78

9. CVE-2022-4294 Norton, Avira, Avast and AVG Antivirus for Windows Privilege Escalation

   Published 2023-01-10

   High·CVSS 7.8 EPSS 0.19%

   Norton, Avira, Avast and AVG Antivirus for Windows may be susceptible to a Privilege Escalation vulnerability, which is a type of issue whereby an attacker may attempt to compromise the software application to gain elevated access to resources that are normally protected from an...

10. CVE-2022-3368 Software Updater of Avira Security for Windows vulnerable to Privilege Escalation

    Published 2022-10-17

    High·CVSS 8.8 EPSS 1.1%

    A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.

11. CVE-2022-28795 A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger th...

    Published 2022-04-12

    Medium·CVSS 6.5 EPSS 1.0%

    A vulnerability within the Avira Password Manager Browser Extensions provided a potential loophole where, if a user visited a page crafted by an attacker, the discovered vulnerability could trigger the Password Manager Extension to fill in the password field automatically. An att...

12. CVE-2020-12463 An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary file...

    Published 2020-05-05

    High·CVSS 7.8 EPSS 0.45%

    An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.

13. CVE-2020-12254 Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink.

    Published 2020-04-26

    High·CVSS 7.8 EPSS 0.40%

    Avira Antivirus before 5.0.2003.1821 on Windows allows privilege escalation or a denial of service via abuse of a symlink.

14. CVE-2020-8961 An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to tur...

    Published 2020-04-09

    Critical·CVSS 9.8 EPSS 2.0%

    An issue was discovered in Avira Free-Antivirus before 15.0.2004.1825. The Self-Protection feature does not prohibit a write operation from an external process. Thus, code injection can be used to turn off this feature. After that, one can construct an event that will modify a fi...

15. CVE-2013-4602 A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.

    Published 2020-02-12

    Medium·CVSS 5.5 EPSS 1.4%

    A Denial of Service (infinite loop) vulnerability exists in Avira AntiVir Engine before 8.2.12.58 via an unspecified function in the PDF Scanner Engine.

16. CVE-2019-18568 Avira Free Antivirus is proned to a local privilege escalation through the execution of kernel code from a restricted user.

    Published 2019-12-31

    High·CVSS 8.8 EPSS 0.74%

    Avira Free Antivirus 15.0.1907.1514 is prone to a local privilege escalation through the execution of kernel code from a restricted user.

17. CVE-2019-11396 An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (files / folders and configuration) are incompatible with the privileged file manipu...

    Published 2019-08-29

    High·CVSS 7.8 EPSS 0.57%

    An issue was discovered in Avira Free Security Suite 10. The permissive access rights on the SoftwareUpdater folder (files / folders and configuration) are incompatible with the privileged file manipulation performed by the product. Files can be created that can be used by an unp...

18. CVE-2016-10402 Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer ove...

    Published 2017-07-27

    High·CVSS 7.8 EPSS 10.2%

    Avira Antivirus engine versions before 8.3.36.60 allow remote code execution as NT AUTHORITY\SYSTEM via a section header with a very large relative virtual address in a PE file, causing an integer overflow and heap-based buffer underflow.

19. CVE-2015-7732 The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.

    Published 2017-06-15

    High·CVSS 7.5 EPSS 1.1%

    The Avira Mobile Security app before 1.5.11 for iOS sends sensitive login information in cleartext.

20. CVE-2017-6417 Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier), and Free Security Suite 15.0 (and earl...

    Published 2017-03-21

    Medium·CVSS 6.7 EPSS 0.94%

    Code injection vulnerability in Avira Total Security Suite 15.0 (and earlier), Optimization Suite 15.0 (and earlier), Internet Security Suite 15.0 (and earlier), and Free Security Suite 15.0 (and earlier) allows a local attacker to bypass a self-protection mechanism, inject arbit...

21. CVE-2015-7303 Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header.

    Published 2015-09-21

    High·CVSS 10.0 EPSS 35.2%

    Use-after-free vulnerability in the Update Manager service in Avira Management Console allows remote attackers to execute arbitrary code via a large header.

22. CVE-2014-5576 The Avira Secure Backup (aka com.avira.avirabackup) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obt...

    Published 2014-09-09

    Medium·CVSS 5.4 EPSS 0.27%

    The Avira Secure Backup (aka com.avira.avirabackup) application 1.2.3 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate.

23. CVE-2012-1443 The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivi...

    Published 2012-03-21

    Medium·CVSS 4.3 EPSS 100.0%

    The RAR file parser in ClamAV 0.96.4, Rising Antivirus 22.83.00.03, Quick Heal (aka Cat QuickHeal) 11.00, G Data AntiVirus 21, AVEngine 20101.3.0.103 in Symantec Endpoint Protection 11, Command Antivirus 5.2.11.5, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Emsisoft...

24. CVE-2012-1425 The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T...

    Published 2012-03-21

    Medium·CVSS 4.3 EPSS 92.2%

    The TAR file parser in Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, Quick Heal (aka Cat QuickHeal) 11.00, Emsisoft Anti-Malware 5.1.0.1, Fortinet Antivirus 4.2.254.0, Ikarus Virus Utilities T3 Command Line Scanner 1.1.97.0, Jiangmin Antivirus 13.0.900, Kaspersky Anti-Vir...

25. CVE-2012-1459 The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefend...

    Published 2012-03-21

    Medium·CVSS 4.3 EPSS 100.0%

    The TAR file parser in AhnLab V3 Internet Security 2011.01.18.00, Avira AntiVir 7.11.1.163, Antiy Labs AVL SDK 2.0.3.7, avast! Antivirus 4.8.1351.0 and 5.0.677.0, AVG Anti-Virus 10.0.0.1190, Bitdefender 7.2, Quick Heal (aka Cat QuickHeal) 11.00, ClamAV 0.96.4, Command Antivirus 5...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.