High severity7.3NVD Advisory· Published Oct 17, 2022· Updated Jun 17, 2026

CVE-2022-3368

Description

A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Avira/Avira Security
cpe:2.3:a:avira:avira_security:*:*:*:*:*:windows:*:*
Range: <=1.1.71.30554
Avira/Avira Security for Windowsllm-fuzzy
Range: <1.1.72.30556
Nortonlifelock/"Avira Security" – for Windowsv5
Range: all

Patches

Vulnerability mechanics

References

support.norton.com/sp/static/external/tools/security-advisories.htmlnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.474
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000