Medium severity6.7NVD Advisory· Published Oct 10, 2019· Updated Jun 17, 2026

CVE-2019-17449

Description

Avira Software Updater before 2.0.6.21094 allows a DLL side-loading attack. NOTE: The vendor thinks that this vulnerability is invalid because exploiting it would require at least administrator privileges and would gain only SYSTEM privileges

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Avira/Avira Software Updaterllm-fuzzy
Range: <2.0.6.21094
Avira/Software Updaterdescription
Avira/Software Updater
cpe:2.3:a:avira:software_updater:*:*:*:*:*:*:*:*
Range: <2.0.6.21094

Patches

Vulnerability mechanics

References

support.avira.com/hc/en-us/articles/360000142857-Avira-Software-UpdaternvdRelease Notes
safebreach.com/Post/Avira-Antivirus-2019-4-Services-DLL-Preloading-and-Potential-Abuses-CVE-2019-17449nvd

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000