High severity8.8NVD Advisory· Published Dec 27, 2021· Updated Jun 17, 2026

CVE-2021-45335

Description

Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files.

Affected products

Avast\!/Antivirus2 versions
cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:avast:antivirus:*:*:*:*:*:*:*:*range: <20.4
- (no CPE)range: <20.4
Avast/Antivirusdescription

Patches

Vulnerability mechanics

References

github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST3%20%26%20CVE-2021-AVST4%20%26%20CVE-2021-AVST5nvdExploitThird Party Advisory
www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0nvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000