PT-2021-7005 · Avast · Avast Antivirus

Published 2021-12-20 · Updated 2026-05-10 · CVE-2022-26522

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avast Antivirus (affected versions not specified)

Description The issue is related to insufficient access control in the aswArPot.sys driver of Avast Antivirus, which could allow an attacker to elevate their privileges.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Time Of Check To Time Of Use

Weakness Enumeration

CWE-264

CWE-367

Related Identifiers

BDU:2022-02923

CVE-2022-26522

Affected Products

Avast Antivirus

References · 12

• https://nvd.nist.gov/vuln/detail/CVE-2022-26522 · Security Note
• https://bdu.fstec.ru/vul/2022-02923 · Security Note
• https://t.me/cveNotify/162667 · Telegram Post
• https://anti-malware.ru/news/2022-05-05-111332/38644 · Note
• https://t.me/aptreports/5463 · Telegram Post
• https://habr.com/ru/news/t/664974 · Note
• https://twitter.com/CVEnew/status/2053559150710268001 · Twitter Post
• https://avast.com/bug-bounty · Note
• https://t.me/true_secator/2922 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2022050523 · Note
• https://t.me/true_secator/6467 · Telegram Post
• https://sentinelone.com/labs/vulnerabilities-in-avast-and-avg-put-millions-at-risk · Note