CVE-2021-45335: High severity avast antivirus vulnerability
Sandbox component in Avast Antivirus prior to 20.4 has an insecure permission which could be abused by local user to control the outcome of scans, and therefore evade detection or delete arbitrary system files.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2021-45335?
CVE-2021-45335 is a vulnerability in Avast Antivirus where the Sandbox component has an insecure permission which could be abused by a local user to control the outcome of scans and potentially delete system files.
Which version of Avast Antivirus is affected by CVE-2021-45335?
Avast Antivirus prior to version 20.4 is affected by CVE-2021-45335.
What is the severity of CVE-2021-45335?
CVE-2021-45335 has a severity rating of 8.8 (high).
How can this vulnerability be exploited?
A local user can exploit CVE-2021-45335 by abusing the insecure permission in the Sandbox component of Avast Antivirus to control scan outcomes and potentially delete system files.
How can I fix CVE-2021-45335?
To fix CVE-2021-45335, update Avast Antivirus to version 20.4 or later.