Description
A vulnerability within the Software Updater functionality of Avira Security for Windows allowed an attacker with write access to the filesystem, to escalate his privileges in certain scenarios. The issue was fixed with Avira Security version 1.1.72.30556.
Exploits (2)
References (1)
Core 1
Core References
Scores
CVSS v3
7.3
EPSS
0.0310
EPSS Percentile
86.9%
Attack Vector
LOCAL
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-276
Status
published
Products (1)
avira/avira_security
< 1.1.71.30554
Published
Oct 17, 2022
Tracked Since
Feb 18, 2026