Unrated severityNVD Advisory· Published Dec 27, 2021· Updated Aug 4, 2024

CVE-2021-45335

Description

Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files.

Affected products

Avast/Antivirusdescription
Avast\!/Avg Antivirusllm-fuzzy
Range: <20.4

Patches

Vulnerability mechanics

References

github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5mitrex_refsource_MISC
www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0mitrex_refsource_MISC

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000