What’s Vulnerable › Vulnerabilities
CVE-2019-17093
- Severity: high (CVSS 7.8 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.6% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2019-10-23 · updated 2026-06-17
- Weakness: CWE-427
Description
An issue was discovered in Avast antivirus before 19.8 and AVG antivirus before 19.8. A DLL Preloading vulnerability allows an attacker to implant %WINDIR%\system32\wbemcomn.dll, which is loaded into a protected-light process (PPL) and might bypass some of the self-defense mechanisms. This affects all components that use WMI, e.g., AVGSvc.exe 19.6.4546.0 and TuneupSmartScan.dll 19.1.884.0.
Affected products
- Avast Antivirus: before 19.8 — fixed in 19.8
- AVG Anti-Virus: before 19.8 — fixed in 19.8
How to fix
Upgrade to a fixed version: Avast Antivirus 19.8; AVG Anti-Virus 19.8. Check the vendor advisory for mitigations.
References
- https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPL-and-Potential-Abuses
- https://safebreach.com/blog
- https://safebreach.com/Post/Avast-Antivirus-AVG-Antivirus-DLL-Preloading-into-PPL-and-Potential-Abuses
- https://safebreach.com/blog
Get alerted when CVE-2019-17093 or the next vulnerability affects your stack