What’s Vulnerable › Vulnerabilities

CVE-2022-4173: Avast and AVG Antivirus for Windows vulnerable to Privilege Escalation

• Severity: high (CVSS 8.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2022-12-06 · updated 2026-06-17
• Weakness: CWE-269

Description

A vulnerability within the malware removal functionality of Avast and AVG Antivirus allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avast and AVG Antivirus version 22.10.

Affected products

• Avast: from 20.5 through 22.9
• Avast/Avg Antivirus: from 20.5 through 22.9

References

• https://support.norton.com/sp/static/external/tools/security-advisories.html
• https://support.norton.com/sp/static/external/tools/security-advisories.html

Get alerted when CVE-2022-4173 or the next vulnerability affects your stack