CVE-2020-12463

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2020-05-05 · updated 2026-06-17

Description

An elevation of privilege vulnerability exists in Avira Software Updater before 2.0.6.27476 due to improperly handling file hard links. This allows local users to obtain take control of arbitrary files.

Affected products

AVIRA Software Updater: before 2.0.6.27476 — fixed in 2.0.6.27476

How to fix

Upgrade to a fixed version: AVIRA Software Updater 2.0.6.27476. Check the vendor advisory for mitigations.

References

https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater
https://support.avira.com/hc/en-us/articles/360000142857-Avira-Software-Updater

Get alerted when CVE-2020-12463 or the next vulnerability affects your stack