CVEvulnerability
CVE-2021-45338
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2021-12-27
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.8 HIGH — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Description
Multiple privilege escalation vulnerabilities in Avast Antivirus prior to 20.4 allow a local user to gain elevated privileges by calling unnecessarily powerful internal methods of the main antivirus service which could lead to the (1) arbitrary file delete, (2) write and (3) reset security.
Affected configurations
• avast antivirus (< 20.4)
References
- https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.1 Exploit, Third Party Advisory
- https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.2 Exploit, Third Party Advisory
- https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.3 Exploit, Third Party Advisory
- https://www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0 Vendor Advisory
- https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.1 Exploit, Third Party Advisory
- https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.2 Exploit, Third Party Advisory
- https://github.com/the-deniss/Vulnerability-Disclosures/tree/main/CVE-2021-AVST1.3 Exploit, Third Party Advisory
- https://www.avast.com/hacker-hall-of-fame/en/researcher-david-eade-reports-antitrack-bug-to-avast-0 Vendor Advisory