NLOK

Latest CVEs · RSS

• CVE-2025-7007 2025-12-01 · CVSS 7.5
  NULL Pointer Dereference vulnerability in Avast Antivirus on MacOS, Avast Anitvirus on Linux when scanning a malformed Windows PE file causes the antivirus proc
• CVE-2025-3500 2025-12-01 · CVSS 9.0
  Integer Overflow or Wraparound vulnerability in Avast Antivirus (25.1.981.6) on Windows allows Privilege Escalation.This issue affects Antivirus: from 25.1.981.
• CVE-2025-8351 2025-12-01 · CVSS 7.8
  Heap-based Buffer Overflow, Out-of-bounds Read vulnerability in Avira Antivirus engine when scanning a malformed file may allow Local Execution of Code or Denia
• CVE-2025-10101 2025-12-01 · CVSS 7.8
  Heap buffer out-of-bounds read vulnerability in Avast Antivirus when scanning a malformed Mach-O file may allow Local Execution of Code or Denial-of-Service of
• CVE-2025-13032 2025-11-11 · CVSS 9.9
  Double fetch in sandbox kernel driver in Avast/AVG Antivirus <25.3  on windows allows local attacker to escalate privelages via pool overflow.
• CVE-2025-10905 2025-11-11 · CVSS 4.4
  Collision in MiniFilter driver in Avast Software Avast Free Antivirus  before 25.9  on Windows allows a local attacker with administrative privileges to disable
• CVE-2025-3025 2025-09-15 · CVSS 7.3
  Elevation of Privileges in the cleaning feature of Gen Digital CCleaner version 6.33.11465 on Windows allows a local user to gain SYSTEM privileges via exploiti
• CVE-2025-4134 2025-05-28 · CVSS 7.3
  Lack of file validation in do_update_vps in Avast Business Antivirus for Linux 4.5 on Linux allows local user to spoof or tamper with the update file via an unv
• CVE-2024-9524 2025-05-09 · CVSS 7.8
  Link Following Local Privilege Escalation Vulnerability in System Speedup Service in Avira Operations GmbH Avira Prime Version 1.1.96.2 on Windows 10 x64 allows
• CVE-2024-13962 2025-05-09 · CVSS 7.8
  Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Gen Digital Inc. Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 al
• CVE-2024-13961 2025-05-09 · CVSS 7.8
  Link Following Local Privilege Escalation Vulnerability in TuneupSvc in Avast Cleanup Premium Version 24.2.16593.17810 on Windows 10 Pro x64 allows local attack
• CVE-2024-13960 2025-05-09 · CVSS 7.8
  Link Following Local Privilege Escalation Vulnerability in TuneUp Service in AVG TuneUp Version 23.4 (build 15592) on Windows 10 allows local attackers to escal
• CVE-2024-13959 2025-05-09 · CVSS 7.8
  Link Following Local Privilege Escalation Vulnerability in TuneupSvc.exe in AVG TuneUp 24.2.16593.9844 on Windows allows local attackers to escalate privileges
• CVE-2024-13759 2025-05-09 · CVSS 7.8
  Local Privilege Escalation in Avira.Spotlight.Service.exe in Avira Prime 1.1.96.2 on Windows 10 x64  allows local attackers to gain system-level privileges via
• CVE-2024-13944 2025-05-09 · CVSS 7.8
  Link Following Local Privilege Escalation Vulnerability in NortonUtilitiesSvc in Norton Utilities Ultimate Version 24.2.16862.6344 on Windows 10 Pro x64 allows
• CVE-2024-9484 2024-10-04 · CVSS 5.1
  An null-pointer-derefrence in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed xar file to crash
• CVE-2024-9483 2024-10-04 · CVSS 5.1
  A null-pointer-dereference in the signature verification module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS may allow a malforme
• CVE-2024-9482 2024-10-04 · CVSS 5.1
  An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed Mach-O file to crash
• CVE-2024-9481 2024-10-04 · CVSS 5.1
  An out-of-bounds write in the engine module in AVG/Avast Antivirus signature <24092400 released on 24/Sep/2024 on MacOS allows a malformed eml file to crash the
• CVE-2024-5803 2024-10-03 · CVSS 7.5
  The AVGUI.exe of AVG/Avast Antivirus before versions before 24.1 can allow a local attacker to escalate privileges via an COM hijack in a time-of-check to time-
• CVE-2024-5102 2024-06-10 · CVSS 7.3
  A sym-linked file accessed via the repair function in Avast Antivirus <24.2 on Windows may allow user to elevate privilege to delete arbitrary files or run proc
• CVE-2023-5760 2023-11-08 · CVSS 8.2
  A time-of-check to time-of-use (TOCTOU) bug in handling of IOCTL (input/output control) requests. This TOCTOU bug leads to an out-of-bounds write vulnerability
• CVE-2023-1900 2023-04-19 · CVSS 7.8
  A vulnerability within the Avira network protection feature allowed an attacker with local execution rights to cause an overflow. This could corrupt the data on
• CVE-2023-1587 2023-04-19 · CVSS 5.8
  Avast and AVG Antivirus for Windows were susceptible to a NULL pointer dereference issue via RPC-interface. The issue was fixed with Avast and AVG Antivirus ver
• CVE-2023-1586 2023-04-19 · CVSS 6.5
  Avast and AVG Antivirus for Windows were susceptible to a Time-of-check/Time-of-use (TOCTOU) vulnerability in the restore process leading to arbitrary file cre