PT-2026-5575 · Avast · Avast Secureline

Roberto Piña · Published 2020-03-24 · Updated 2026-02-01 · CVE-2020-37037

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Avast SecureLine version 5.5.522.0

Description The software contains an unquoted service path issue that may allow local users to execute code with elevated system privileges. An attacker can exploit the unquoted path within the service configuration to inject malicious code. This code would then execute with LocalSystem account permissions when the service starts.

Recommendations Apply updates to address the unquoted service path issue.

Exploit

Fix

Weakness Enumeration

CWE-428

Related Identifiers

BDU:2026-01097

CVE-2020-37037

Affected Products

Avast Secureline

References · 8

• 🔥 https://exploit-db.com/exploits/48249 · Exploit
• https://bdu.fstec.ru/vul/2026-01097 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2020-37037 · Security Note
• https://t.me/CVEtracker/43426 · Telegram Post
• https://vulncheck.com/advisories/avast-secureline-secureline-unquoted-service-path · Note
• https://exploit-db.com/exploits/48249%20VulnCheck · Note
• https://t.me/cveNotify/150511 · Telegram Post
• https://avast.com · Note